From fb80c952ee0507d125d6ea0263ec553b452df8fa Mon Sep 17 00:00:00 2001
From: rlx <rlx@rolux.org>
Date: Sun, 17 Jan 2016 13:27:49 +0530
Subject: [PATCH] encode html entities

---
 static/js/infoView.js | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/static/js/infoView.js b/static/js/infoView.js
index dd15043..1e6ef9a 100644
--- a/static/js/infoView.js
+++ b/static/js/infoView.js
@@ -143,12 +143,14 @@ oml.ui.infoView = function(externalData, isMixed) {
             var items = [];
             if (ui._lists) {
                 items = ui._lists.filter(function(list) {
-                    return list.user == oml.user.preferences.username
+                    return list.user === ''
                         && list.type != 'smart';
                 }).map(function(list) {
                     return {
                         id: list.id,
-                        title: Ox._('Download to {0}', [list.name])
+                        title: Ox._('Download to {0}', [
+                            Ox.encodeHTMLEntities(list.name)
+                        ])
                     };
                 });
                 items.splice(1, 0, [{}]);
@@ -171,6 +173,7 @@ oml.ui.infoView = function(externalData, isMixed) {
         if (data.mediastate == 'unavailable' && !ui._lists) {
             setListItems();
         }
+
         var $element = (data.mediastate == 'unavailable' || Ox.isUndefined(data.mediastate))
             ? Ox.FormElementGroup({
                 elements: [