aniani/elinks
1
0
Fork 0
mirror of https://github.com/rkd77/elinks.git synced 2024-06-27 01:25:34 +00:00
Code

[gopher] XSS in gopher. Refs #125

Browse Source 
add_to_string was replaced add_html_to_string.
This commit is contained in:
Witold Filipczyk 2021-08-28 11:47:13 +02:00
parent 70331f3f78
commit 558e7776ab
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/protocol/gopher/gopher.c
View File

@ -382,7 +382,7 @@ add_gopher_description(struct string *buffer, enum gopher_entity entity)
return;
add_to_string(buffer, "<b>");
add_to_string(buffer, description);
add_html_to_string(buffer, description, strlen(description));
add_to_string(buffer, "</b> ");
}
@ -502,7 +502,7 @@ add_gopher_menu_line(struct string *buffer, unsigned char *line)
case GOPHER_INFO:
/* Information or separator line */
add_to_string(buffer, name);
add_html_to_string(buffer, name, strlen(name));
break;
default:
@ -515,7 +515,7 @@ add_gopher_menu_line(struct string *buffer, unsigned char *line)
* was correctly parsed. */
if (!port || !init_string(&address)) {
/* Parse error: Bad menu item */
add_to_string(buffer, name);
add_html_to_string(buffer, name, strlen(name));
break;
}
@ -552,7 +552,7 @@ add_gopher_menu_line(struct string *buffer, unsigned char *line)
add_gopher_link(buffer, name, address.source);
} else {
add_to_string(buffer, name);
add_html_to_string(buffer, name, strlen(name));
}
done_string(&address);