git.shiar.nl / perl / plp / .git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d49738f) | patch
eg/plpinfo: escape html characters in dumped fields
authorMischa POSLAWSKY <perl@shiar.org>
Sun, 26 Feb 2017 23:22:19 +0000 (00:22 +0100)
committerMischa POSLAWSKY <perl@shiar.org>
Sat, 31 Mar 2018 20:58:53 +0000 (22:58 +0200)
commit0ce1fd1e8663e8d7c95b53af17d55aba782c26de
tree88a287d9e7d5b1d04f0863762c47ef3c547ff241tree | snapshot
parentd49738fac3e2a7b9621af1c8d46895faea377592commit | diff
eg/plpinfo: escape html characters in dumped fields

Support special characters in environment and user input values.
Closes XSS vector if public.
eg/plpinfo.plp diff | blob | history
PLP - Perl in HTML pages