$NetBSD: patch-ax,v 1.2 2012/11/02 19:02:51 shattered Exp $ --- htaccess-htpasswd/search.cgi.orig 2011-04-27 00:19:02.000000000 +0200 +++ htaccess-htpasswd/search.cgi 2011-06-15 23:23:42.000000000 +0200 @@ -19,7 +19,8 @@ @dirs = &list_directories(); %got = map { ( "$_->[0]/$config{'htaccess'}", 1 ) } @dirs; -print "",&text('search_doing', "$in{'search'}"),"
\n"; +print "",&text('search_doing', "" . &html_escape($in{'search'}) . + ""), "
\n";
# Use the find command
&switch_user();
@@ -28,10 +29,12 @@
while($f =
\n";
+ print &text('search_already', "" . &html_escape($f) .
+ ""),"
\n";
}
elsif (!open(TEST, $f)) {
- print &text('search_open', "$f", $!),"
\n";
+ print &text('search_open', "" . &html_escape($f) . "",
+ $!),"
\n";
}
else {
$conf = &foreign_call($apachemod, "get_htaccess_config", $f);
@@ -40,14 +43,16 @@
$require = &foreign_call($apachemod, "find_directive",
"require", $conf, 1);
if ($currfile && $require) {
- print &text('search_found', "$f",
- "$currfile"),"
\n";
+ print &text('search_found', "" . &html_escape($f) .
+ "", "" . &html_escape($currfile) .
+ ""),"
\n";
local $d = $f;
$d =~ s/\/$config{'htaccess'}$//;
push(@dirs, [ $d, $currfile ]);
}
else {
- print &text('search_noprot', "$f"),"
\n";
+ print &text('search_noprot', "" .
+ &html_escape($f) . ""),"
\n";
}
}
}