Fix to HTML escape passed package name

This commit is contained in:
iliajie
2023-05-15 20:37:33 +03:00
parent 8f1a5a6376
commit b5b6c44d5f
2 changed files with 2 additions and 2 deletions

View File

@@ -76,7 +76,7 @@ elsif ($in{source} == 2) {
\&progress_callback);
}
else {
&install_error(&text('install_eurl', $in{'url'}));
&install_error(&text('install_eurl', &html_escape($in{'url'})));
}
&install_error(&html_escape($error)) if ($error);
$source = $in{'url'};

View File

@@ -71,7 +71,7 @@ if (@match) {
print &ui_form_end([ [ undef, $text{'search_delete'} ] ]);
}
else {
print "<b>",&text('search_nomatch', "<tt>$s</tt>"),"</b><p>\n";
print "<b>",&text('search_nomatch', "<tt>@{[&html_escape($s)]}</tt>"),"</b><p>\n";
}
&ui_print_footer("", $text{'index_return'});