ecleese / plexWatchWeb

A web front-end for plexWatch.
255 stars 41 forks source link

Escape everything when encoding JS JSON #136

Closed Arcanemagus closed 9 years ago

Arcanemagus commented 9 years ago

Encode everything that the PHP json_encode() can when sending it to the client side JavaScript to prevent user input from breaking this.

Fixes https://github.com/ecleese/plexWatchWeb/issues/135.