From 1d62a321a7197fb407b3916d11df239fdc9019f6 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 31 Aug 2016 15:41:52 +0200
Subject: [PATCH] escape '"' in user/group names

---
 views/bootstrap/class.WorkflowGraph.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/views/bootstrap/class.WorkflowGraph.php b/views/bootstrap/class.WorkflowGraph.php
index 806d67b2c..351aedde2 100644
--- a/views/bootstrap/class.WorkflowGraph.php
+++ b/views/bootstrap/class.WorkflowGraph.php
@@ -193,7 +193,7 @@ $(document).ready(function() {
 						},
 						classes: 'action',
 						scratch: {
-							app: {groups: '".implode(", ", $gnames)."', users: '".implode(", ", $unames)."'}
+							app: {groups: \"".str_replace('"', "\\\"", implode(", ", $gnames))."\", users: \"".str_replace('"', "\\\"", implode(", ", $unames))."\"}
 						}
 					});\n";
 				}