From f2bbd37ec254e9a186179a1169450b5c463921c7 Mon Sep 17 00:00:00 2001
From: Tom Canac <contact@tomcanac.com>
Date: Tue, 30 Jun 2015 00:51:35 +0200
Subject: [PATCH] fix #102 ?

---
 index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.php b/index.php
index 2098abe..e3ae332 100755
--- a/index.php
+++ b/index.php
@@ -406,7 +406,7 @@ if (!$lazyload && sizeof($dirs) + sizeof($files) > $thumbs_pr_page) {
 if ($requestedDir != "" && $requestedDir != "photos") {
     $breadcrumb_navigation = "<div class=\"NavWrapper\">";
     $breadcrumb_navigation .= "<a href='?dir='>" . $label_home . "</a> $breadcrumb_separator ";
-    $navitems = explode("/", $_REQUEST['dir']);
+    $navitems = explode("/", htmlspecialchars($_REQUEST['dir']));
     for ($i = 0; $i < sizeof($navitems); $i++) {
         if ($i == sizeof($navitems)-1) {
             $breadcrumb_navigation .= $navitems[$i];