ports.cgi doesn't handle html tags?

Simon L. Nielsen simon at nitro.dk
Fri Jul 18 13:17:27 PDT 2003


On 2003.07.18 20:31:12 +0100, Ceri Davies wrote:
> On Fri, Jul 18, 2003 at 07:52:39PM +0200, Martin Jakob wrote:
> > Hi, 
> > 
> > while searching for php-pear ports (see previous mail :) via
> > http://www.freebsd.org/ports i got a not complete rendered page. I think the culprit is the
> > <select> tag in the pear-HTML_Select_Common-1.1_2 port description. It seems
> > the tags are not filtered.
> 
> Could you please file this as a PR?

It seemed like a quick fix, and it was; so here is a path which fixes
the problem :-)...

-- 
Simon L. Nielsen
-------------- next part --------------
Index: ports.cgi
===================================================================
RCS file: /home/ncvs/www/en/cgi/ports.cgi,v
retrieving revision 1.66
diff -u -d -r1.66 ports.cgi
--- ports.cgi	15 May 2003 12:08:05 -0000	1.66
+++ ports.cgi	18 Jul 2003 20:16:06 -0000
@@ -345,6 +345,8 @@
        }
     }
     $descfile =~ s/^$localPrefix/$remotePrefixFtp/o;
+    $comment =~ s/</\&lt;/g;
+    $comment =~ s/>/\&gt;/g;
 
     print qq{<DT><B><A NAME="$version">$version</A></B>\n};
     print qq{<DD>$comment<BR>\n};
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20030718/40303e4f/attachment.bin


More information about the freebsd-ports mailing list