diff options
| author | Ted Trask <ttrask01@yahoo.com> | 2009-01-15 21:44:39 +0000 |
|---|---|---|
| committer | Ted Trask <ttrask01@yahoo.com> | 2009-01-15 21:44:39 +0000 |
| commit | 1c7f0f184aa7407a97f0d81a6954007bab66e6eb (patch) | |
| tree | 63b9110ec51f5e0b0abba42777181e4cda986382 | |
| parent | efc61cae908bd93c2828dd14cb98c23b1385a67a (diff) | |
| download | acf-dnscache-1c7f0f184aa7407a97f0d81a6954007bab66e6eb.tar.bz2 acf-dnscache-1c7f0f184aa7407a97f0d81a6954007bab66e6eb.tar.xz | |
Modified html.lua and viewlibrary.lua and all html files to html_escape variables before displaying them.
git-svn-id: svn://svn.alpinelinux.org/acf/dnscache/trunk@1678 ab2d0c66-481e-0410-8bed-d214d4d58bed
| -rw-r--r-- | dnscache-editdomain-html.lsp | 2 | ||||
| -rw-r--r-- | dnscache-listdomains-html.lsp | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/dnscache-editdomain-html.lsp b/dnscache-editdomain-html.lsp index 1380add..e3cd759 100644 --- a/dnscache-editdomain-html.lsp +++ b/dnscache-editdomain-html.lsp @@ -9,7 +9,7 @@ io.write("</span>") --]] %> -<H1><%= form.label %></H1> +<H1><%= html.html_escape(form.label) %></H1> <% form.action = page_info.script .. page_info.prefix .. page_info.controller .. "/" .. page_info.action form.value.domain.readonly = true diff --git a/dnscache-listdomains-html.lsp b/dnscache-listdomains-html.lsp index 634b733..2c3cfd2 100644 --- a/dnscache-listdomains-html.lsp +++ b/dnscache-listdomains-html.lsp @@ -27,7 +27,7 @@ io.write("</span>") io.write(html.link{value = "deletedomain?domain=" .. domain, label="Delete " }) end %> </TD> - <TD style="white-space:nowrap;" width="90%"><%= domain %></TD> + <TD style="white-space:nowrap;" width="90%"><%= html.html_escape(domain) %></TD> </TR> <% end %> </TABLE> |