pegasus/anope
1
0
Fork 0
mirror of https://github.com/anope/anope.git synced 2026-07-07 12:43:13 +02:00
Code Activity

webcpanel: escape values in template_fileserver

Browse Source 
Remove other escapes to prevent double escape.

Not all replaced values were escaped, such as replies from commands.
This commit is contained in:
Adam
2017-06-05 10:11:22 -04:00
parent 04f49225c9
commit 1a6f42b994
7 changed files with 20 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/webcpanel/template_fileserver.cpp
+5 -1
View File
@@ -238,7 +238,11 @@ void TemplateFileServer::Serve(HTTPProvider *server, const Anope::string &page_n
if (ifok && forok)
{
const Anope::string &replacement = FindReplacement(r, content.substr(0, f - 1));
Anope::string replacement = FindReplacement(r, content.substr(0, f - 1));
// htmlescape all text replaced onto the page
replacement = HTTPUtils::Escape(replacement);
finished += replacement;
}
}