a5e08f7bcc
I installed the rails_xss plugin, for the main purpose of seeing what will break with Rails 3.0 (where the behaviour of the plugin is the default). I think I've fixed everything, but let me know if you see stuff that is HTML-escaped, which shouldn't be. As a side benefit, we now use Erubis, rather than ERB, to render templates. They tell me it's faster ...
30 lines
713 B
Plaintext
30 lines
713 B
Plaintext
$ erubis -l c example.ec
|
|
#line 1 "example.ec"
|
|
|
|
#include <stdio.h>
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
int i;
|
|
|
|
|
|
fputs("<html>\n"
|
|
" <body>\n"
|
|
" <p>Hello ", stdout); fprintf(stdout, "%s", argv[0]); fputs("!</p>\n"
|
|
" <table>\n"
|
|
" <tbody>\n", stdout);
|
|
for (i = 1; i < argc; i++) {
|
|
fputs(" <tr bgcolor=\"", stdout); fprintf(stdout, i % 2 == 0 ? "#FFCCCC" : "#CCCCFF"); fputs("\">\n"
|
|
" <td>", stdout); fprintf(stdout, "%d", i); fputs("</td>\n"
|
|
" <td>", stdout); fprintf(stdout, "%s", argv[i]); fputs("</td>\n"
|
|
" </tr>\n", stdout);
|
|
}
|
|
fputs(" </tbody>\n"
|
|
" </table>\n"
|
|
" </body>\n"
|
|
"</html>\n", stdout);
|
|
|
|
return 0;
|
|
}
|
|
|