boxesserver: Allow multi-line errors
Fixing potential cross-site scripting attacks in passing
This commit is contained in:
parent
e8e248994b
commit
18ea1a5ed4
|
@ -317,8 +317,9 @@ Create boxes and more with a laser cutter!
|
||||||
<meta name="flattr:id" content="456799">
|
<meta name="flattr:id" content="456799">
|
||||||
</head>
|
</head>
|
||||||
<body>
|
<body>
|
||||||
<h1>An error occurred!</h1>
|
<h1>An error occurred!</h1>""",
|
||||||
<p>""", str(e).encode(), b"""</p>
|
u"".join(u"<p>%s</p>" % cgi.escape(s) for s in type(u"")(e).split(u"\n")).encode('utf-8'),
|
||||||
|
b"""
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
""" ]
|
""" ]
|
||||||
|
|
Loading…
Reference in New Issue