Changeset 28913 for main/trunk/greenstone2/runtime-src/src/recpt/dynamicclassifieraction.cpp

Timestamp:

2014-03-18T20:22:59+13:00 (10 years ago)

Author:

ak19

Message:

6th commit for security of cgiargs. Looked over all occurrences of setmacro in *action.cpp files

File:

• main/trunk/greenstone2/runtime-src/src/recpt/dynamicclassifieraction.cpp (modified) (1 diff)

main/trunk/greenstone2/runtime-src/src/recpt/dynamicclassifieraction.cpp

@@ -102 +102 @@
     text_t dynamic_classifier_id = (*dynamic_classifier_iterator).first;
     navigation_bar_entries += "_navbarspacer_";
-    navigation_bar_entries += "_navtab_(_gwcgi_?c=" + args["c"] + "&a=dc&dcl=" + dynamic_classifier_id + "," + dynamic_classifier_id;
+    navigation_bar_entries += "_navtab_(_gwcgi_?c=" + encodeForURL(args["c"]) + "&a=dc&dcl=" + dynamic_classifier_id + "," + dynamic_classifier_id;
     if (args["a"] == "dc" && args["dcl"] == dynamic_classifier_id)
     {