diff options
author | Ted Trask <ttrask01@yahoo.com> | 2009-01-15 21:44:39 +0000 |
---|---|---|
committer | Ted Trask <ttrask01@yahoo.com> | 2009-01-15 21:44:39 +0000 |
commit | bd93652bba291b8c6a5d6f0753aea1a5241f9f6a (patch) | |
tree | 627b6414cf8687cae70ed35a94ae8183dfa377a2 /opennhrp-listinterfaces-html.lsp | |
parent | 5734f776f166b9fdf0f1a2d21227bf7ee6ed14b4 (diff) | |
download | acf-opennhrp-bd93652bba291b8c6a5d6f0753aea1a5241f9f6a.tar.bz2 acf-opennhrp-bd93652bba291b8c6a5d6f0753aea1a5241f9f6a.tar.xz |
Modified html.lua and viewlibrary.lua and all html files to html_escape variables before displaying them.
git-svn-id: svn://svn.alpinelinux.org/acf/opennhrp/trunk@1678 ab2d0c66-481e-0410-8bed-d214d4d58bed
Diffstat (limited to 'opennhrp-listinterfaces-html.lsp')
-rw-r--r-- | opennhrp-listinterfaces-html.lsp | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/opennhrp-listinterfaces-html.lsp b/opennhrp-listinterfaces-html.lsp index ca3fdb6..7f9181c 100644 --- a/opennhrp-listinterfaces-html.lsp +++ b/opennhrp-listinterfaces-html.lsp @@ -4,7 +4,7 @@ require("viewfunctions") <% displaycommandresults({"editinterface"}, session) %> -<h1><%= view.label %></h1> +<h1><%= html.html_escape(view.label) %></h1> <TABLE> <TR style="background:#eee;font-weight:bold;"> <TD style="padding-right:20px;white-space:nowrap;text-align:left;" class="header">Action</TD> @@ -17,9 +17,9 @@ require("viewfunctions") <TD style="padding-right:20px;white-space:nowrap;"> <% io.write(html.link{value = "editinterface?interface="..intf.interface.."&redir="..page_info.orig_action, label="Edit " }) %> </TD> - <TD style="padding-right:20px;white-space:nowrap;text-align:right;"><%= intf.interface %></TD> - <TD style="padding-right:20px;white-space:nowrap;"><%= intf.type %></TD> - <TD style="white-space:nowrap;" width="90%"><P class="error"><%= string.gsub(intf.errtxt or "", "\n", "<BR>") %></P></TD> + <TD style="padding-right:20px;white-space:nowrap;text-align:right;"><%= html.html_escape(intf.interface) %></TD> + <TD style="padding-right:20px;white-space:nowrap;"><%= html.html_escape(intf.type) %></TD> + <TD style="white-space:nowrap;" width="90%"><P class="error"><%= string.gsub(html.html_escape(intf.errtxt), "\n", "<BR>") %></P></TD> </TR> <% end %> </TABLE> |