rem: item.setAttribute( 'href', 'javascript:browse_dir(\''+escapebackslashes(addslashes(elt.getAttribute( 'path' )))+'\');'); 
add: item.setAttribute( 'href', 'javascript:browse_dir(\''+addslashes(escapebackslashes(elt.getAttribute( 'path' )))+'\');'); 
context: function parse_browse_dir( ){    if( req.readyState == 4 )    {        if( req.status == 200 )        {            var answer = req.responseXML.documentElement;            if( !answer ) return;            var browser = document.getElementById( 'browser' );            var pos = document.createElement( "div" );            var elt = answer.firstChild;            while( elt )            {                if( elt.nodeName == "element" )                {                    var item = document.createElement( "a" );                    setclass( item, 'browser' );                    if( elt.getAttribute( 'type' ) == 'directory' )                    {                        item.setAttribute( 'href', 'javascript:browse_dir(\''+escapebackslashes(addslashes(elt.getAttribute( 'path' )))+'\');');                    }                    else                    {                        item.setAttribute( 'href', 'javascript:browse_path(\''+escapebackslashes(addslashes(elt.getAttribute( 'path' )))+'\');' );                    }                    item.appendChild( document.createTextNode( elt.getAttribute( 'name' ) ) );                    pos.appendChild( item );                    if( elt.getAttribute( 'type' ) == 'directory' )                    {                        pos.appendChild( document.createTextNode( ' ' ) );                        var item = document.createElement( "a" );                        setclass( item, 'browser' );                        item.setAttribute( 'href', 'javascript:browse_path(\''+escapebackslashes(addslashes(elt.getAttribute( 'path' )))+'\');');                        item.appendChild( document.createTextNode( '(select)' ) );                        pos.appendChild( item );                    }                    pos.appendChild( document.createElement( "br" ) );                }                elt = elt.nextSibling;            }            clear_children( browser );            browser.appendChild( pos );        }        else        {            /*alert( 'Error! HTTP server replied: ' + req.status );*/        }    }}
meta: 1058	/local1/tlutelli/issta_data/temp/all_js/javascript/2006_temp/2006/1058/892f3cf9ce0972ff9868e9dfe498bc3d24c55a4e/functions.js/buggy/share/http/js/functions.js