From d28cc096abf6aad4c12e3a90f30edf4c5c6fed1f Mon Sep 17 00:00:00 2001
From: Bent Bisballe Nyeng <deva@aasimon.org>
Date: Thu, 11 Jun 2020 18:11:58 +0200
Subject: Add escaping/de-escaping to attribute names and values.

---
 src/ws/proto.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/ws/proto.js b/src/ws/proto.js
index 5eadd70..f597503 100644
--- a/src/ws/proto.js
+++ b/src/ws/proto.js
@@ -158,8 +158,8 @@ try
 					                                  detail: {
 						                                  subscribeid: subscribeid,
 						                                  id: id,
-						                                  name: msg[3],
-						                                  value: msg[4],
+						                                  name: unescape(msg[3]),
+						                                  value: unescape(msg[4]),
 					                                  },
 					                                  bubbles: true,
 					                                  cancelable: true
@@ -236,7 +236,7 @@ function remove(id)
 
 function update(id, name, value)
 {
-	transmit("update "+id+" "+name+" "+value);
+	transmit("update "+id+" "+escape(name)+" "+escape(value));
 }
 
 function move(id, parent, before)
-- 
cgit v1.2.3