From 243dfdd59542f548f06ec4f2faedfd123adbe083 Mon Sep 17 00:00:00 2001
From: df <fieldhouse@gmx.net>
Date: Sat, 17 Apr 2021 01:55:33 +0000
Subject: [PATCH] Fix quoting and escaping of JS fragments

NB jQuery $('#id') in a string looks like an [expr ...] to Jim!
---
 webif/html/browse/file.jim | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/webif/html/browse/file.jim b/webif/html/browse/file.jim
index 6675248..9ef4f5c 100755
--- a/webif/html/browse/file.jim
+++ b/webif/html/browse/file.jim
@@ -283,9 +283,10 @@ if {$type ne "ts" || ("ODEncrypted" ni $flags && $url eq "") } {
 </tr>"
 	set hasffmpeg 1
 } elseif {$type eq "ts" && $url ne ""} {
-	puts { <script type="text/javascript"> }
-	puts "$('#playDL').attr('href','$url').enable();
-	puts { </script> }
+	puts [format { 
+		<script type="text/javascript"> 
+		$('#playDL').attr('href','%s').enable();
+		</script> } $url]
 }
 puts "
 	</table>
@@ -293,10 +294,9 @@ puts "
 
 if {$hasffmpeg} {
 	set url "/browse/ffmpeg.jim?file=[cgi_quote_url $file]"
-	puts { <script type="text/javascript"> }
-	puts "var url = \"$url\";"
-	puts {
-	$('#ffmpeg').load(url, function() { $('#play, #playDL').enable(); });
-</script>
-}
+	puts [format { 
+		<script type="text/javascript"> 
+		var url = "%s";
+		$('#ffmpeg').load(url, function() { $('#play, #playDL').enable(); }); }
+		</script> } $url]
 }