From 3c67f77555e636f949588c049c2074c70a1cbe33 Mon Sep 17 00:00:00 2001 From: Ted Trask Date: Thu, 15 Jan 2009 21:44:39 +0000 Subject: Modified html.lua and viewlibrary.lua and all html files to html_escape variables before displaying them. git-svn-id: svn://svn.alpinelinux.org/acf/alpine-baselayout/trunk@1678 ab2d0c66-481e-0410-8bed-d214d4d58bed --- logfiles-tail-html.lsp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'logfiles-tail-html.lsp') diff --git a/logfiles-tail-html.lsp b/logfiles-tail-html.lsp index 72725ad..94bc4a8 100644 --- a/logfiles-tail-html.lsp +++ b/logfiles-tail-html.lsp @@ -8,8 +8,8 @@ function Update(){ $.ajaxSetup({cache:false}); $.getJSON( - '<%= page_info.script .. page_info.prefix .. page_info.controller .. "/" .. page_info.action %>', - {name:'<% io.write(form.value.filename.value) if form.value.grep.value ~= "" then io.write("',grep:'"..form.value.grep.value) end %>', offset:currentoffset}, + '<%= html.html_escape(page_info.script .. page_info.prefix .. page_info.controller .. "/" .. page_info.action) %>', + {name:'<% io.write(html.html_escape(form.value.filename.value)) if form.value.grep.value ~= "" then io.write("',grep:'"..html.html_escape(form.value.grep.value)) end %>', offset:currentoffset}, function(data) { data.value.filecontent.value = data.value.filecontent.value.split("\n").join("
\n"); -- cgit v1.2.3