Escape URIs in the navigation strip.
Patch by denise.
diffs (12 lines):
diff -r dd5edc3e66a9 -r 51aa51ab5f9f cgi-bin/weblib.pl
--- a/cgi-bin/weblib.pl Mon Sep 21 05:39:45 2009 +0000
+++ b/cgi-bin/weblib.pl Mon Sep 21 00:47:09 2009 -0500
@@ -2857,7 +2857,7 @@ LOGIN_BAR
#determine whether style is "mine", and define new uri variable to
manipulate
#note: all expressions case-insensitive
my $currentstylemine = ($uri =~ m/style=mine/i);
- my $newuri = $uri;
+ my $newuri = LJ::ehtml( $uri );
#manipulate destination URI for the style links
if ($currentstylemine) {
#if last character before style=mine is a &, it can be deleted
together with style=mine,
_______________________________________________
dw-changelog mailing list
[email protected]
http://lists.dwscoalition.org/mailman/listinfo/dw-changelog
