diff options
| author | Thom May <thommay@apache.org> | 2003-10-30 17:43:45 +0100 |
|---|---|---|
| committer | Thom May <thommay@apache.org> | 2003-10-30 17:43:45 +0100 |
| commit | 63abfc7538508ff74ea6c9e9bd63764cc4158472 (patch) | |
| tree | b41b4f27bc8d7d4820e3683dfdcd8cd7ffb91701 /modules/generators | |
| parent | * ssl_engine_log.c (ssl_log_ssl_error): Use the thread-safe (diff) | |
| download | apache2-63abfc7538508ff74ea6c9e9bd63764cc4158472.tar.xz apache2-63abfc7538508ff74ea6c9e9bd63764cc4158472.zip | |
* modules/generators/mod_info.c:
(mod_info_module_cmds) ap_escape_html() all directives and
arguments.
PR: 24232
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101626 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'modules/generators')
| -rw-r--r-- | modules/generators/mod_info.c | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/modules/generators/mod_info.c b/modules/generators/mod_info.c index 9dffaf5b08..888cb1383f 100644 --- a/modules/generators/mod_info.c +++ b/modules/generators/mod_info.c @@ -181,7 +181,7 @@ static void mod_info_module_cmds(request_rec * r, const command_rec * cmds, if (nest > block_start) { block_start++; apr_snprintf(htmlstring, sizeof(htmlstring), "%s %s", - tmptree->parent->directive, + tmptree->parent->directive, tmptree->parent->args); ap_rputs("<dd><tt>", r); mod_info_html_cmd_string(r, htmlstring, 0); @@ -190,15 +190,18 @@ static void mod_info_module_cmds(request_rec * r, const command_rec * cmds, if (nest == 2) { ap_rprintf(r, "<dd><tt> %s " "<i>%s</i></tt></dd>\n", - tmptree->directive, tmptree->args); + ap_escape_html(r->pool,tmptree->directive), + ap_escape_html(r->pool,tmptree->args)); } else if (nest == 1) { ap_rprintf(r, "<dd><tt> %s <i>%s</i></tt></dd>\n", - tmptree->directive, tmptree->args); + ap_escape_html(r->pool,tmptree->directive), + ap_escape_html(r->pool,tmptree->args)); } else { ap_rputs("<dd><tt>", r); mod_info_html_cmd_string(r, tmptree->directive, 0); - ap_rprintf(r, " <i>%s</i></tt></dd>\n", tmptree->args); + ap_rprintf(r, " <i>%s</i></tt></dd>\n", + ap_escape_html(r->pool,tmptree->args)); } } ++cmd; |