michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-09-28 16:30:56 +01:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Improve escaping of log fields

Browse Source
This commit is contained in:
Jamie Cameron
2026-09-23 20:46:03 -07:00
parent 290ab1aaea
commit 623a5f0fa0
1 changed files with 10 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
webminlog/view.cgi
View File

@@ -38,12 +38,14 @@ print &ui_table_row($text{'view_module'},
if ($act->{'module'} ne 'global') {
print &ui_table_row($text{'view_script'},
$act->{'script'} =~ /\// ?
"<tt>$act->{'script'}</tt>" :
"<tt>$act->{'module'}/$act->{'script'}</tt>");
$act->{'script'} =~ /\// ?
"<tt>".&html_escape($act->{'script'})."</tt>" :
"<tt>".&html_escape($act->{'module'})."/".
&html_escape($act->{'script'})."</tt>");
}
else {
print &ui_table_row($text{'view_script'}, "<tt>$act->{'script'}</tt>");
print &ui_table_row($text{'view_script'},
"<tt>".&html_escape($act->{'script'})."</tt>");
}
print &ui_table_row($text{'view_user'},
@@ -54,9 +56,10 @@ print &ui_table_row($text{'view_ip'},
if ($act->{'sid'} ne '-') {
print &ui_table_row($text{'view_sid'},
&ui_link("search.cgi?sid=$act->{'sid'}&uall=1&mall=1&tall=1&fall=1&return=".
&urlize($in{'return'})."&returndesc=".
&urlize($in{'returndesc'}), $act->{'sid'}) );
&ui_link("search.cgi?sid=$act->{'sid'}&uall=1&mall=1&tall=1&".
"fall=1&return=".&urlize($in{'return'}).
"&returndesc=".&urlize($in{'returndesc'}),
&html_escape($act->{'sid'})) );
}
print &ui_table_row($text{'view_time'}, &make_date($act->{'time'}).