Thread: Firmware Update 5.16.7 out
View Single Post
Old 02-24-2024, 09:38 PM   #19
GeorgeYellow
Enthusiast
GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!GeorgeYellow is faster than a rolling 'o,' stronger than silent 'e,' and leaps capital 'T' in a single bound!
 
Posts: 40
Karma: 50000
Join Date: Nov 2017
Device: Nook, Kindle
This change in 5.6.7 looks mighty suspicious ...

Code:
mesquite/browser/javascripts/fileManager.js   2024-02-09 17:54:56.000000000 -0800

+/*
+ * Changes html content to text content
+ */
+function htmlToText(string) {
+    const div = document.createElement('div');
+    div.appendChild(document.createTextNode(string));
+    return div.innerHTML;
+}
+
 /**
  * Manages Browser file upload and download requests
  */
@@ -30,7 +39,8 @@

         // get dialog message
         var mf = new MessageFormat(b.strings.messages.downloadConfirm);
-        var message = mf.format({ filename: request.filename });
+        var filename = htmlToText(request.filename);
+        var message = mf.format({ filename: filename });
I don't suppose there's a way to trigger a download confirmation prompt from a "file:///mnt/us/exploit.html" URL by any chance, or does this require enabling WIFI ?
GeorgeYellow is offline   Reply With Quote