From 88535aaa87b81fb0cd175ce226f5075e3e7f28c5 Mon Sep 17 00:00:00 2001
From: Alib <aliboba@free.fr>
Date: Tue, 20 Apr 2010 11:30:43 +0200
Subject: added escape for music filename

---
 js/istreamdev.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/js/istreamdev.js b/js/istreamdev.js
index 28ef4d1..8f98c33 100644
--- a/js/istreamdev.js
+++ b/js/istreamdev.js
@@ -752,9 +752,9 @@ function addplayer(button) {
 	async: false,
 	success: function(json) {
 		var track = json.track;
-		playercode = "<embed id='musicplayer' enablejavascript='true' id='musicplayer' src='" + track[0].file + "' width='0' height='0' autoplay='false' name='player' type='audio/mp3' loop='true' controller='false'"; 
+		playercode = "<embed id='musicplayer' enablejavascript='true' id='musicplayer' src='" + escape(track[0].file) + "' width='0' height='0' autoplay='false' name='player' type='audio/mp3' loop='true' controller='false'"; 
 		for ( var i=1; i<track.length; i+=1 ) {
-			qtattr = "'<" + track[i].file + ">'";
+			qtattr = "'<" + escape(track[i].file) + ">'";
 			playercode += "qtnext" + i + "=" + qtattr;
 			}
 		playercode += "></embed>";
-- 
cgit v1.2.3