Escape item names (d00f6dca) · Commits · github_fork / Stable Diffusion Webui

modules/ui_extra_networks.py

+2 −2

Original line number	Diff line number	Diff line
		@@ -213,9 +213,9 @@ class ExtraNetworksPage:
		metadata_button = ""
		metadata = item.get("metadata")
		if metadata:
		metadata_button = f"<div class='metadata-button card-button' title='Show internal metadata' onclick='extraNetworksRequestMetadata(event, {quote_js(self.name)}, {quote_js(item['name'])})'></div>"
		metadata_button = f"<div class='metadata-button card-button' title='Show internal metadata' onclick='extraNetworksRequestMetadata(event, {quote_js(self.name)}, {quote_js(html.escape(item['name']))})'></div>"

		edit_button = f"<div class='edit-button card-button' title='Edit metadata' onclick='extraNetworksEditUserMetadata(event, {quote_js(tabname)}, {quote_js(self.id_page)}, {quote_js(item['name'])})'></div>"
		edit_button = f"<div class='edit-button card-button' title='Edit metadata' onclick='extraNetworksEditUserMetadata(event, {quote_js(tabname)}, {quote_js(self.id_page)}, {quote_js(html.escape(item['name']))})'></div>"

		local_path = ""
		filename = item.get("filename", "")