Changeset 28899 for main/trunk/greenstone2/runtime-src/src/recpt/queryaction.cpp

Timestamp:

2014-03-14T22:46:25+13:00 (10 years ago)

Author:

ak19

Message:

Third commit for security, for ensuring cgiargs macros are websafe. This time all the changes to the runtime action classes.

File:

• main/trunk/greenstone2/runtime-src/src/recpt/queryaction.cpp (modified) (1 diff)

main/trunk/greenstone2/runtime-src/src/recpt/queryaction.cpp

@@ -747 +747 @@
       << "<input type=\"hidden\" name=\"ccp\" value=\"1\">\n"
       << "<center><table width=\"_pagewidth_\"><tr valign=\"top\">\n"
-      << "<td>Select collections to search for \"" << args["q"] 
-      << "\" <i>(index=" << index << " subcollection=" << subcollection
-      << " language=" << language << ")</i></td>\n"
+      << "<td>Select collections to search for \"" << encodeForHTML(args["q"])
+      << "\" <i>(index=" << encodeForHTML(index) << " subcollection=" << encodeForHTML(subcollection)
+      << " language=" << encodeForHTML(language) << ")</i></td>\n"
       << "<td><input type=\"submit\" value=\"_query:textbeginsearch_\"></td>\n"
       << "</tr></table></center>\n"