deac/instiki
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Fix XSS vulnerabilities in chunk-handling

Browse source
This commit is contained in:
Jacques Distler 2007-09-23 19:30:39 +00:00
parent 36b86a9d41
commit a3d3f1c536
6 changed files with 55 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
lib/chunks/chunk.rb
View file

@ -74,6 +74,14 @@ module Chunk
@content.delete_chunk(self)
end
def html_escape(string)
string.gsub( /&/, "&" ).
gsub( /</, "&lt;" ).
gsub( />/, "&gt;" ).
gsub( /'/, "&#39;" ).
gsub( /"/, "&quot;" )
end
end
end