Rev905, Escape title and query string
This commit is contained in:
parent
e389e22832
commit
2f25204be9
2 changed files with 3 additions and 3 deletions
|
@ -8,7 +8,7 @@ class Config(object):
|
||||||
|
|
||||||
def __init__(self, argv):
|
def __init__(self, argv):
|
||||||
self.version = "0.3.6"
|
self.version = "0.3.6"
|
||||||
self.rev = 903
|
self.rev = 905
|
||||||
self.argv = argv
|
self.argv = argv
|
||||||
self.action = None
|
self.action = None
|
||||||
self.config_file = "zeronet.conf"
|
self.config_file = "zeronet.conf"
|
||||||
|
|
|
@ -274,10 +274,10 @@ class UiRequest(object):
|
||||||
file_url=file_url,
|
file_url=file_url,
|
||||||
file_inner_path=file_inner_path,
|
file_inner_path=file_inner_path,
|
||||||
address=site.address,
|
address=site.address,
|
||||||
title=title,
|
title=cgi.escape(title, True),
|
||||||
body_style=body_style,
|
body_style=body_style,
|
||||||
meta_tags=meta_tags,
|
meta_tags=meta_tags,
|
||||||
query_string=query_string,
|
query_string=re.escape(query_string),
|
||||||
wrapper_key=site.settings["wrapper_key"],
|
wrapper_key=site.settings["wrapper_key"],
|
||||||
wrapper_nonce=wrapper_nonce,
|
wrapper_nonce=wrapper_nonce,
|
||||||
postmessage_nonce_security=postmessage_nonce_security,
|
postmessage_nonce_security=postmessage_nonce_security,
|
||||||
|
|
Loading…
Reference in a new issue