archive/oddmuse
2
0
Fork 0
forked from github/kensanata.oddmuse
Code Pull Requests Activity

Merge branch 'master' of git.sv.gnu.org:/srv/git/oddmuse

Browse Source
This commit is contained in:
Aleks-Daniel Jakimenko
2015-08-02 23:44:48 +03:00
parent 9e58992459 5b8caecee9
commit d72ee44c3d
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
t/xss.t
View File

@@ -14,9 +14,11 @@
require 't/test.pl';
package OddMuse;
use Test::More tests => 2;
use Test::More tests => 3;
test_page(update_page('Test', 'Content is saved', '<xss>'),
'Content is saved');
test_page(get_page('action=browse id=Test diff=1'),
'&lt;xss&gt;');
test_page(get_page('action=rss'),
'&amp;lt;xss&amp;gt;');

2
wiki.pl
View File

@@ -1909,6 +1909,8 @@ sub RssItem {
my $name = ItemName($id);
if (GetParam('full', 0)) { # full page means summary is not shown
$summary = PageHtml($id, 50 * 1024, T('This page is too big to send over RSS.'));
} else {
$summary = QuoteHtml($summary); # page summary must be quoted
}
my $date = TimeToRFC822($ts);
$username = QuoteHtml($username);