httpd-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From s.@apache.org
Subject svn commit: r1418752 - in /httpd/httpd/trunk/modules: ldap/util_ldap_cache_mgr.c test/mod_policy.c
Date Sat, 08 Dec 2012 20:32:01 GMT
Author: sf
Date: Sat Dec  8 20:32:00 2012
New Revision: 1418752

URL: http://svn.apache.org/viewvc?rev=1418752&view=rev
Log:
add missing html escaping

Modified:
    httpd/httpd/trunk/modules/ldap/util_ldap_cache_mgr.c
    httpd/httpd/trunk/modules/test/mod_policy.c

Modified: httpd/httpd/trunk/modules/ldap/util_ldap_cache_mgr.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ldap/util_ldap_cache_mgr.c?rev=1418752&r1=1418751&r2=1418752&view=diff
==============================================================================
--- httpd/httpd/trunk/modules/ldap/util_ldap_cache_mgr.c (original)
+++ httpd/httpd/trunk/modules/ldap/util_ldap_cache_mgr.c Sat Dec  8 20:32:00 2012
@@ -604,7 +604,7 @@ char *util_ald_cache_display_stats(reque
     if (id) {
         buf2 = apr_psprintf(p,
                  "<a href=\"%s?%s\">%s</a>",
-             r->uri,
+             ap_escape_html(r->pool, ap_escape_uri(r->pool, r->uri)),
              id,
              name);
     }

Modified: httpd/httpd/trunk/modules/test/mod_policy.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/test/mod_policy.c?rev=1418752&r1=1418751&r2=1418752&view=diff
==============================================================================
--- httpd/httpd/trunk/modules/test/mod_policy.c (original)
+++ httpd/httpd/trunk/modules/test/mod_policy.c Sat Dec  8 20:32:00 2012
@@ -1011,7 +1011,8 @@ static const char *set_type_url(cmd_parm
 {
     policy_conf *conf = dconf;
 
-    conf->type_url = url;
+    /* url is only used inside <a href="...">, escape accordingly */
+    conf->type_url = ap_escape_html(cmd->pool, url);
     conf->type_url_set = 1;
 
     return NULL;



Mime
View raw message