diff options
-rw-r--r-- | samba-editshare-html.lsp | 2 | ||||
-rw-r--r-- | samba-join-html.lsp | 2 | ||||
-rw-r--r-- | samba-listshares-html.lsp | 10 |
3 files changed, 7 insertions, 7 deletions
diff --git a/samba-editshare-html.lsp b/samba-editshare-html.lsp index aa67e11..e1d327a 100644 --- a/samba-editshare-html.lsp +++ b/samba-editshare-html.lsp @@ -2,7 +2,7 @@ require("viewfunctions") %> -<H1><%= form.label %></H1> +<H1><%= html.html_escape(form.label) %></H1> <% form.action = page_info.script .. page_info.prefix .. page_info.controller .. "/" .. page_info.action local order = {"name", "valid", "comment", "path", "browseable", "guest", "printable", "writable"} diff --git a/samba-join-html.lsp b/samba-join-html.lsp index 12afb09..d26a41b 100644 --- a/samba-join-html.lsp +++ b/samba-join-html.lsp @@ -8,7 +8,7 @@ require("viewfunctions") viewlibrary.dispatch_component("status") end %> -<H1><%= form.label %></H1> +<H1><%= html.html_escape(form.label) %></H1> <% form.action = page_info.script .. page_info.prefix .. page_info.controller .. "/" .. page_info.action local order = {"domain", "login", "password"} diff --git a/samba-listshares-html.lsp b/samba-listshares-html.lsp index 67af4c8..7489601 100644 --- a/samba-listshares-html.lsp +++ b/samba-listshares-html.lsp @@ -27,9 +27,9 @@ No Shares Found <%= html.link{value=page_info.script..page_info.prefix..page_info.controller.."/deleteshare?name="..share.name, label="Delete "} %> <% end %> </TD> - <TD style="padding-right:20px;white-space:nowrap;"><%= share.name %></TD> - <TD style="padding-right:20px;white-space:nowrap;"><%= share.path %></TD> - <TD style="white-space:nowrap;"><%= share.comment %></TD> + <TD style="padding-right:20px;white-space:nowrap;"><%= html.html_escape(share.name) %></TD> + <TD style="padding-right:20px;white-space:nowrap;"><%= html.html_escape(share.path) %></TD> + <TD style="white-space:nowrap;"><%= html.html_escape(share.comment) %></TD> </TR> <% end %> </TABLE> @@ -37,8 +37,8 @@ No Shares Found <% if viewlibrary and viewlibrary.dispatch_component and session.permissions.samba.createshare then %> <H2>Create new share</H2> -<form action="<%= page_info.script .. page_info.prefix .. page_info.controller %>/createshare" method="POST"> -<input class="hidden" type="hidden" name="redir" value="<%= page_info.orig_action %>" > +<form action="<%= html.html_escape(page_info.script .. page_info.prefix .. page_info.controller) %>/createshare" method="POST"> +<input class="hidden" type="hidden" name="redir" value="<%= html.html_escape(page_info.orig_action) %>" > <dl><dt></dt><dd><input class="submit" type="submit" value="Create Share"></dd></dl> </form> <% end %> |