summaryrefslogtreecommitdiffstats
path: root/samba-listshares-html.lsp
diff options
context:
space:
mode:
authorTed Trask <ttrask01@yahoo.com>2009-01-15 21:44:39 +0000
committerTed Trask <ttrask01@yahoo.com>2009-01-15 21:44:39 +0000
commitc57c6b16c74f7f570c6460be8131da62ea36e237 (patch)
treec1e7f4908643cae06d1e8a78084e6cbe22f8aad7 /samba-listshares-html.lsp
parent09baa0e5afa49cd348c5035efef75c40825fc24f (diff)
downloadacf-samba-c57c6b16c74f7f570c6460be8131da62ea36e237.tar.bz2
acf-samba-c57c6b16c74f7f570c6460be8131da62ea36e237.tar.xz
Modified html.lua and viewlibrary.lua and all html files to html_escape variables before displaying them.
git-svn-id: svn://svn.alpinelinux.org/acf/samba/trunk@1678 ab2d0c66-481e-0410-8bed-d214d4d58bed
Diffstat (limited to 'samba-listshares-html.lsp')
-rw-r--r--samba-listshares-html.lsp10
1 files changed, 5 insertions, 5 deletions
diff --git a/samba-listshares-html.lsp b/samba-listshares-html.lsp
index 67af4c8..7489601 100644
--- a/samba-listshares-html.lsp
+++ b/samba-listshares-html.lsp
@@ -27,9 +27,9 @@ No Shares Found
<%= html.link{value=page_info.script..page_info.prefix..page_info.controller.."/deleteshare?name="..share.name, label="Delete "} %>
<% end %>
</TD>
- <TD style="padding-right:20px;white-space:nowrap;"><%= share.name %></TD>
- <TD style="padding-right:20px;white-space:nowrap;"><%= share.path %></TD>
- <TD style="white-space:nowrap;"><%= share.comment %></TD>
+ <TD style="padding-right:20px;white-space:nowrap;"><%= html.html_escape(share.name) %></TD>
+ <TD style="padding-right:20px;white-space:nowrap;"><%= html.html_escape(share.path) %></TD>
+ <TD style="white-space:nowrap;"><%= html.html_escape(share.comment) %></TD>
</TR>
<% end %>
</TABLE>
@@ -37,8 +37,8 @@ No Shares Found
<% if viewlibrary and viewlibrary.dispatch_component and session.permissions.samba.createshare then %>
<H2>Create new share</H2>
-<form action="<%= page_info.script .. page_info.prefix .. page_info.controller %>/createshare" method="POST">
-<input class="hidden" type="hidden" name="redir" value="<%= page_info.orig_action %>" >
+<form action="<%= html.html_escape(page_info.script .. page_info.prefix .. page_info.controller) %>/createshare" method="POST">
+<input class="hidden" type="hidden" name="redir" value="<%= html.html_escape(page_info.orig_action) %>" >
<dl><dt></dt><dd><input class="submit" type="submit" value="Create Share"></dd></dl>
</form>
<% end %>