From 3c67f77555e636f949588c049c2074c70a1cbe33 Mon Sep 17 00:00:00 2001
From: Ted Trask <ttrask01@yahoo.com>
Date: Thu, 15 Jan 2009 21:44:39 +0000
Subject: Modified html.lua and viewlibrary.lua and all html files to
 html_escape variables before displaying them.

git-svn-id: svn://svn.alpinelinux.org/acf/alpine-baselayout/trunk@1678 ab2d0c66-481e-0410-8bed-d214d4d58bed
---
 health-system-html.lsp | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

(limited to 'health-system-html.lsp')

diff --git a/health-system-html.lsp b/health-system-html.lsp
index 8ee3572..9fcea6f 100644
--- a/health-system-html.lsp
+++ b/health-system-html.lsp
@@ -3,22 +3,22 @@
 <h1>System</h1>
 
 <h2>Versions and names</h2>
-<pre><%= view.value.version.value %></pre>
-<pre><%= view.value.uname.value %></pre>
+<pre><%= html.html_escape(view.value.version.value) %></pre>
+<pre><%= html.html_escape(view.value.uname.value) %></pre>
 
 <h2>Uptime</h2>
-<pre><%= view.value.uptime.value %></pre>
+<pre><%= html.html_escape(view.value.uptime.value) %></pre>
 
 <h2>Time/TimeZone</h2>
-<pre><%= view.value.date.value %></pre>
-<pre><%= view.value.timezone.value %></pre>
+<pre><%= html.html_escape(view.value.date.value) %></pre>
+<pre><%= html.html_escape(view.value.timezone.value) %></pre>
 
 <h2>Memory</h2>
-<pre><%= view.value.memory.value %></pre>
+<pre><%= html.html_escape(view.value.memory.value) %></pre>
 
 <TABLE STYLE="margin:0px;padding:0px;border:0px">
 	<TR>
-		<TD>0%</TD><TD WIDTH="<%= view.value.memory.used %>%" STYLE="background:red;border:2px solid black;border-right:none;"><CENTER><B><% if ( tonumber(view.value.memory.used) > 10) then io.write(view.value.memory.used .. "%") end %></B></CENTER></TD><TD WIDTH="<%= (100-view.value.memory.used) %>%" STYLE="background:#0c0;border:2px solid black;border-left:none;""><CENTER><B><% if ( 90 > tonumber(view.value.memory.used)) then io.write((100-view.value.memory.used) .. "%") end %></B></CENTER></TD><TD>100%</TD>
+		<TD>0%</TD><TD WIDTH="<%= html.html_escape(view.value.memory.used) %>%" STYLE="background:red;border:2px solid black;border-right:none;"><CENTER><B><% if ( tonumber(view.value.memory.used) > 10) then io.write(html.html_escape(view.value.memory.used) .. "%") end %></B></CENTER></TD><TD WIDTH="<%= (100-tonumber(view.value.memory.used)) %>%" STYLE="background:#0c0;border:2px solid black;border-left:none;""><CENTER><B><% if ( 90 > tonumber(view.value.memory.used)) then io.write((100-tonumber(view.value.memory.used)) .. "%") end %></B></CENTER></TD><TD>100%</TD>
 	</TR>
 </TABLE>
 <TABLE STYLE="margin:0px;padding:0px;border:0px;margin-top:5px;">
-- 
cgit v1.2.3