[LON-CAPA-cvs] cvs: loncom /auth lonauth.pm

[raeburn]

raeburn		Sat May 21 05:16:43 2022 EDT

  Modified files:              
    /loncom/auth	lonauth.pm 
  Log:
  - Bug 6754 LON-CAPA as LTI Provider
    Escape any single quotes in destination URL to avoid javascript errors.
  
  
Index: loncom/auth/lonauth.pm
diff -u loncom/auth/lonauth.pm:1.172 loncom/auth/lonauth.pm:1.173
--- loncom/auth/lonauth.pm:1.172	Sun Feb 27 01:43:13 2022
+++ loncom/auth/lonauth.pm	Sat May 21 05:16:43 2022
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # User Authentication Module
 #
-# $Id: lonauth.pm,v 1.172 2022/02/27 01:43:13 raeburn Exp $
+# $Id: lonauth.pm,v 1.173 2022/05/21 05:16:43 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -248,6 +248,7 @@
         if ($env{'request.lti.target'} eq '') {
             my $ltitarget = (($destination =~ /\?/) ? '&' : '?').
                             'ltitarget=iframe';
+            &js_escape(\$destination);
             $js = <<"ENDJS";
 
 <script type="text/javascript">