From a3304a29f57bdd886b5008e1b544d7c51c55e315 Mon Sep 17 00:00:00 2001
From: j <j@mailb.org>
Date: Fri, 21 Jul 2017 09:08:36 +0200
Subject: [PATCH] decode/encode

---
 static/js/mediaView.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/static/js/mediaView.js b/static/js/mediaView.js
index 35aec891..c2448ad3 100644
--- a/static/js/mediaView.js
+++ b/static/js/mediaView.js
@@ -554,7 +554,7 @@ pandora.ui.mediaView = function(options) {
             ids: self.selected,
         };
         keys.forEach(function(key) {
-            data[key == 'id' ? 'item' : key] = self['$' + key + 'Input'].value();
+            data[key == 'id' ? 'item' : key] = Ox.encodeHTMLEntities(self['$' + key + 'Input'].value());
         });
         self.$moveButton.options(
             {disabled: true, title: Ox._('Moving Files...')}
@@ -587,10 +587,10 @@ pandora.ui.mediaView = function(options) {
             keys.forEach(function(key) {
                 if (result.data[key]) {
                     self['$' + key + 'Input'].value(
-                        Ox.contains(listKeys, key)
+                        Ox.decodeHTMLEntities(Ox.contains(listKeys, key)
                             ? result.data[key].join(', ')
                             : result.data[key]
-                    );
+                    ));
                 }
             });
             updateForm();