From a3b52b752fd3c2c0d0c6d9a0b42a5be85eff39bd Mon Sep 17 00:00:00 2001
From: Moutonjr Geoff <moutonjr@jserv.fr>
Date: Wed, 2 Oct 2019 18:21:13 +0200
Subject: [PATCH] Adding check and sanitize quotes.

---
 check.php                  |  1 +
 src/assets/js/generator.js | 10 +++++-----
 2 files changed, 6 insertions(+), 5 deletions(-)
 create mode 100644 check.php

diff --git a/check.php b/check.php
new file mode 100644
index 0000000..34b078f
--- /dev/null
+++ b/check.php
@@ -0,0 +1 @@
+<pre> <?php echo shell_exec("jq . lessons.json") ?> </pre>
diff --git a/src/assets/js/generator.js b/src/assets/js/generator.js
index 2a431f1..c3ec6d9 100644
--- a/src/assets/js/generator.js
+++ b/src/assets/js/generator.js
@@ -10,15 +10,15 @@ $(document).ready(function(){
 								wordsHtml += '                  <div style="display: none;" class="col-md-4 lesson lesson-' + lessonIndex + '">';
 								wordsHtml += '                    <div class="service-item">';
 								if('img' in word){
-								wordsHtml += '                      <div class="icon" onclick="englishSay(\''+ word.name +'\')" style="background-image:url(images/'+ word.img +');"></div>';
+								wordsHtml += '                      <div class="icon" onclick="englishSay(\''+ word.name.replace("'","\\'") +'\')" style="background-image:url(\'images/'+ word.img +'\');"></div>';
 								} else if ('url' in word) {
-								wordsHtml += '                      <div class="icon" onclick="englishSay(\''+ word.name +'\')" style="background-image:url('+ word.url +');"></div>';
+								wordsHtml += '                      <div class="icon" onclick="englishSay(\''+ word.name.replace("'","\\'") +'\')" style="background-image:url(\''+ encodeURIComponent(word.url) +'\');"></div>';
 								} else {
-								wordsHtml += '                      <div class="icon" onclick="englishSay(\''+ word.name +'\')" style="background-image:url(https://img.icons8.com/'+ word.name +'.png);"></div>';
+								wordsHtml += '                      <div class="icon" onclick="englishSay(\''+  word.name.replace("'","\\'") +'\')" style="background-image:url(\'https://img.icons8.com/'+ encodeURIComponent(word.name) +'.png\');"></div>';
 								}
-								wordsHtml += '                      <h4 class="clickSay" onclick="englishSay(\''+ word.name +'\')">'+ word.name +'</h4>';
+								wordsHtml += '                      <h4 class="clickSay" onclick="englishSay(\''+ word.name.replace("'","\\'") +'\')">'+ word.name +'</h4>';
 								if('example' in word){
-								wordsHtml += '                      <p class="clickSay" onclick="englishSay(\''+ word.example +'\')">'+ word.example +'</p>';
+								wordsHtml += '                      <p class="clickSay" onclick="englishSay(\''+ word.example.replace("'","\\'") +'\')">'+ word.example +'</p>';
 								}
 								wordsHtml += '                    </div>';
 								wordsHtml += '                  </div>';