From a16908c61d018a5961751ec908f1b890b2217b54 Mon Sep 17 00:00:00 2001
From: Ted Trask <ttrask01@yahoo.com>
Date: Thu, 15 Jan 2009 21:44:39 +0000
Subject: Modified html.lua and viewlibrary.lua and all html files to
 html_escape variables before displaying them.

git-svn-id: svn://svn.alpinelinux.org/acf/iptables/trunk@1678 ab2d0c66-481e-0410-8bed-d214d4d58bed
---
 iptables-details-html.lsp | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'iptables-details-html.lsp')

diff --git a/iptables-details-html.lsp b/iptables-details-html.lsp
index 9edc25d..daf646a 100644
--- a/iptables-details-html.lsp
+++ b/iptables-details-html.lsp
@@ -9,13 +9,13 @@ io.write("</span>")
 
 <% viewlibrary.dispatch_component("status") %>
 
-<H2><%= data.label %></H2>
+<H2><%= html.html_escape(data.label) %></H2>
 <DL>
 <% for i,tab in ipairs({"filter", "nat", "mangle"}) do %>
-	<H3><%= tab %></H3>
+	<H3><%= html.html_escape(tab) %></H3>
 	<TABLE>
-	<TR><TD><%= data.value[tab].chains %> Chains</TD></TR>
-	<TR><TD><%= data.value[tab].rules %> Rules</TD></TR>
+	<TR><TD><%= html.html_escape(data.value[tab].chains) %> Chains</TD></TR>
+	<TR><TD><%= html.html_escape(data.value[tab].rules) %> Rules</TD></TR>
 	</TABLE>
 <% end %>
 </DL>
-- 
cgit v1.2.3