Changeset 28948 for main/trunk/greenstone2/runtime-src

Timestamp:

2014-03-24T16:24:31+13:00 (10 years ago)

Author:

ak19

Message:

Another security commit surrounding cgiargs. Collectionaction updated.

File:

• main/trunk/greenstone2/runtime-src/src/recpt/collectoraction.cpp (modified) (1 diff)

main/trunk/greenstone2/runtime-src/src/recpt/collectoraction.cpp

@@ -870 +870 @@
     rv += "<input type=text name=\"bc1input\" value=\"";
     if (i < numvalues) {
-      rv += dm_safe(decode_commas(inputvalues[i]));
+      //rv += dm_safe(decode_commas(inputvalues[i]));
+      text_t websafe = encodeForHTMLAttr(inputvalues[i]);
+      rv += dm_safe(decode_commas(websafe));
     }
     rv += "\" size=50>";