From d1217a09bc8f1b93fb718c9c8fde0816be3628d3 Mon Sep 17 00:00:00 2001
From: Ambrose Chua <ambrose@chua.family>
Date: Sun, 10 Mar 2019 08:45:39 +0800
Subject: [PATCH] Fix XSS vulnerability

Then again, you shouldn't be exposing this app to the world.
---
 views/list.handlebars | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/views/list.handlebars b/views/list.handlebars
index 9ecd6a9..f4b28dd 100644
--- a/views/list.handlebars
+++ b/views/list.handlebars
@@ -19,9 +19,9 @@
                 <input type="checkbox" class="custom-control-input multi-select" data-select="{{name}}" data-select-size="{{size}}" id="check{{@index}}">
                 <label class="custom-control-label d-flex align-items-start justify-content-between" for="check{{@index}}">
                     {{#if isdirectory}}
-                        <a href="{{name}}/" class="name">{{name}}/</a>
+                        <a href="./{{name}}/" class="name">{{name}}/</a>
                     {{else}}
-                        <a href="{{name}}" class="name mr-auto">{{name}}</a>
+                        <a href="./{{name}}" class="name mr-auto">{{name}}</a>
                         <span class="badge badge-pill badge-secondary">{{size}}</span>
                     {{/if}}
                 </label>