From f7bba5fcde5a5674a08f2f62236a7b3ab4be8108 Mon Sep 17 00:00:00 2001 From: Ted Trask Date: Thu, 15 Jan 2009 21:44:39 +0000 Subject: Modified html.lua and viewlibrary.lua and all html files to html_escape variables before displaying them. git-svn-id: svn://svn.alpinelinux.org/acf/tcpproxy/trunk@1678 ab2d0c66-481e-0410-8bed-d214d4d58bed --- tcpproxy-listsmtpfiles-html.lsp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'tcpproxy-listsmtpfiles-html.lsp') diff --git a/tcpproxy-listsmtpfiles-html.lsp b/tcpproxy-listsmtpfiles-html.lsp index 5de93ba..40c8161 100644 --- a/tcpproxy-listsmtpfiles-html.lsp +++ b/tcpproxy-listsmtpfiles-html.lsp @@ -22,7 +22,7 @@ require("viewfunctions") <%= html.link{value=page_info.script..page_info.prefix..page_info.controller.."/delsmtpfile?filename="..file, label="Delete "} %> <% end %> - <%= file %> + <%= html.html_escape(file) %> <% end %> @@ -30,7 +30,7 @@ require("viewfunctions") <% if viewlibrary and viewlibrary.dispatch_component and session.permissions.tcpproxy.createsmtpfile then local createform = viewlibrary.dispatch_component("createsmtpfile", nil, true) %> -

<%= createform.label %>

+

<%= html.html_escape(createform.label) %>

<% createform.action = page_info.script .. page_info.prefix .. page_info.controller .. "/createsmtpfile" displayform(createform) -- cgit v1.2.3