[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#747348: [www] : do html escape is the right fix



Package: www.debian.org
Severity: wishlist
Tags: patch 

html escape is needed *before* output here:

+	    $maintainer{"$lang/$file"} =~ s/&/&/g;
+	    $maintainer{"$lang/$file"} =~ s/</&lt;/g;
+	    $maintainer{"$lang/$file"} =~ s/>/&gt;/g;

-- 
victory
no need to CC me :-)
http://userscripts.org/scripts/show/102724 0.0.1.4
http://userscripts.org/scripts/show/163846 0.0.1
http://userscripts.org/scripts/show/163848 0.0.1
--- stattrans-r115.pl	2014-05-08 02:46:02 +0900
+++ stattrans.pl	2014-05-08 02:46:27 +0900
@@ -192,6 +192,9 @@
 	}
 	if ($transcheck->maintainer()) {
 	    $maintainer{"$lang/$file"} = $transcheck->maintainer();
+	    $maintainer{"$lang/$file"} =~ s/&/&amp;/g;
+	    $maintainer{"$lang/$file"} =~ s/</&lt;/g;
+	    $maintainer{"$lang/$file"} =~ s/>/&gt;/g;
 	}
 	$count++;
 	$sizes{$file} = (stat "".($original{"english/$file"}||"english")."/".$file)[7];

Reply to: