From a009a60dd69a2fd67699dbf3183398779ec5721e Mon Sep 17 00:00:00 2001
From: Ted Trask <ttrask01@yahoo.com>
Date: Thu, 15 Jan 2009 21:44:39 +0000
Subject: Modified html.lua and viewlibrary.lua and all html files to
 html_escape variables before displaying them.

git-svn-id: svn://svn.alpinelinux.org/acf/squid/trunk@1678 ab2d0c66-481e-0410-8bed-d214d4d58bed
---
 squid-saccess-html.lsp | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'squid-saccess-html.lsp')

diff --git a/squid-saccess-html.lsp b/squid-saccess-html.lsp
index 0c11f08..9b9a40f 100644
--- a/squid-saccess-html.lsp
+++ b/squid-saccess-html.lsp
@@ -18,7 +18,7 @@
 If you wish to specify hosts that may access the Internet by IP address, 
 enter the address(es) in the box below, one per line.
 </p>
-<textarea name="s_ip"><% io.write( service.config.s_ip ) %></textarea>
+<textarea name="s_ip"><%= html.html_escape( service.config.s_ip ) %></textarea>
 
 <h2>Browser Identification</h2>
 <p>
@@ -27,7 +27,7 @@ specify it here. Note that any client identifying itself as this type
 of browser will be allowed anonymous access. Enter the browser identification(s) 
 in the box below, one per line. Regular expressions are allowed.
 </p>
-<textarea name="s_browser"><% io.write( service.config.s_browser ) %></textarea>
+<textarea name="s_browser"><%= html.html_escape( service.config.s_browser ) %></textarea>
 
 <h2>Special Domains</h2>
 <p>
@@ -35,7 +35,7 @@ If you have a specail domain that needs to be accessed in a special way, you
 may specify if here. This will allow anonymous access to the domains listed. 
 Enter the domain url below. Regular expressions are allowed.
 </p>
-<textarea name="s_domain"><% io.write( service.config.s_domain ) %></textarea>
+<textarea name="s_domain"><%= html.html_escape( service.config.s_domain ) %></textarea>
 
 <h3>Save Changes</h3>
 <dl>
-- 
cgit v1.2.3