18.40 [patch #718]

Author: Ilia Rostovtsev

CHANGELOG.md

@@ -1,13 +1,13 @@
 ## Changelog
 
-#### Version 18.41-beta38 (18 April, 2017)
+#### Version 18.41-beta39 (18 April, 2017)
 * Added ability to install patched version of the theme directly from GitHub, to get early access on the new features [#707](https://github.com/qooob/authentic-theme/issues/707)
 * Added console script for updating the theme [#703](https://github.com/qooob/authentic-theme/issues/703)
 * Added error handler for saving files in background calls [#689](https://github.com/qooob/authentic-theme/issues/689)
 * Added controls for operations in icon mode [#684](https://github.com/qooob/authentic-theme/issues/684)
 * Added ability to display version patch number [#676](https://github.com/qooob/authentic-theme/issues/676)
 * Added PGP signature to verify authenticity of the package
-* Fixed bugs [#687](https://github.com/qooob/authentic-theme/issues/687) [#688](https://github.com/qooob/authentic-theme/issues/688) [#692](https://github.com/qooob/authentic-theme/issues/692) [#693](https://github.com/qooob/authentic-theme/issues/693) [#695](https://github.com/qooob/authentic-theme/issues/695) [#696](https://github.com/qooob/authentic-theme/issues/696) [#697](https://github.com/qooob/authentic-theme/issues/697) [#698](https://github.com/qooob/authentic-theme/issues/698) [#699](https://github.com/qooob/authentic-theme/issues/699) [#700](https://github.com/qooob/authentic-theme/issues/700) [#701](https://github.com/qooob/authentic-theme/issues/701) [#702](https://github.com/qooob/authentic-theme/issues/702) [#704](https://github.com/qooob/authentic-theme/issues/704) [#706](https://github.com/qooob/authentic-theme/issues/706) [#710](https://github.com/qooob/authentic-theme/issues/710) [#711](https://github.com/qooob/authentic-theme/issues/711) [#713](https://github.com/qooob/authentic-theme/issues/713) [#714](https://github.com/qooob/authentic-theme/issues/714) [#716](https://github.com/qooob/authentic-theme/issues/716) [#51526](https://www.virtualmin.com/node/51526) [#51807](https://www.virtualmin.com/node/51807)
+* Fixed bugs [#687](https://github.com/qooob/authentic-theme/issues/687) [#688](https://github.com/qooob/authentic-theme/issues/688) [#692](https://github.com/qooob/authentic-theme/issues/692) [#693](https://github.com/qooob/authentic-theme/issues/693) [#695](https://github.com/qooob/authentic-theme/issues/695) [#696](https://github.com/qooob/authentic-theme/issues/696) [#697](https://github.com/qooob/authentic-theme/issues/697) [#698](https://github.com/qooob/authentic-theme/issues/698) [#699](https://github.com/qooob/authentic-theme/issues/699) [#700](https://github.com/qooob/authentic-theme/issues/700) [#701](https://github.com/qooob/authentic-theme/issues/701) [#702](https://github.com/qooob/authentic-theme/issues/702) [#704](https://github.com/qooob/authentic-theme/issues/704) [#706](https://github.com/qooob/authentic-theme/issues/706) [#710](https://github.com/qooob/authentic-theme/issues/710) [#711](https://github.com/qooob/authentic-theme/issues/711) [#713](https://github.com/qooob/authentic-theme/issues/713) [#714](https://github.com/qooob/authentic-theme/issues/714) [#716](https://github.com/qooob/authentic-theme/issues/716) [#718](https://github.com/qooob/authentic-theme/issues/718) [#51526](https://www.virtualmin.com/node/51526) [#51807](https://www.virtualmin.com/node/51807)
 
 ### Version 18.40 (21 March, 2017)
 * Added ability to use theme configuration for all users [#640](https://github.com/qooob/authentic-theme/issues/640#issuecomment-287572703)

unauthenticated/js/parent.js

@@ -828,9 +828,9 @@ $(window).keydown(function(p) {
                     }
                 } else {
                     if (r > 1) {
-                        var a = "<b>" + $(".-shell-port-type").text() + " " + cmdInput.val() + "</b>\n";
+                        var a = "<b>" + $(".-shell-port-type").text() + " " + escape_html(cmdInput.val()) + "</b>\n";
                         shellOut.find("pre").append(a);
-                        shellOut.find("pre").append(u.join("\n") + "\n");
+                        shellOut.find("pre").append(escape_html(u.join("\n") + "\n"));
                         shellCont.scrollTop(shellCont[0].scrollHeight)
                     }
                 }
@@ -910,7 +910,7 @@ $(window).keyup(function(D) {
                 }
                 if (s) {
                     var d = (e[__shell_commands__i__ % w]).replace(/^!/, "");
-                    cmdInput.val(d).focus()
+                    cmdInput.val(decode_html(d)).focus()
                 }
             }
             return
@@ -1034,7 +1034,7 @@ $(window).keyup(function(D) {
                         var I = $(".-shell-port-type").text(),
                             H = $(a).find("pre").html().replace(/>&gt;/g, ">" + I + ""),
                             c = $(a).find('select[name="pcmd"] option').map(function() {
-                                return $(this).val()
+                                return escape_html($(this).val())
                             }).get().reOrder(-1, 0).reverse();
                         localStorage.setItem($hostname + "-shell_commands", JSON.stringify(c));
                         newPwd = $(a).find('input[name="pwd"]').val();

unauthenticated/js/parent.min.js

@@ -1 +1 @@
-18.40-git-201704181220
+18.40-git-201704181526