Profouzors
/
boxespy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

boxesserver: Allow multi-line errors 

Fixing potential cross-site scripting attacks in passing
This commit is contained in:
chrysn 2019-04-20 15:54:49 +02:00 committed by Florian Festi
parent e8e248994b
commit 18ea1a5ed4
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
scripts/boxesserver
View File

@ -317,8 +317,9 @@ Create boxes and more with a laser cutter!
<meta name="flattr:id" content="456799"> <meta name="flattr:id" content="456799">
</head> </head>
<body> <body>
<h1>An error occurred!</h1> <h1>An error occurred!</h1>""",
<p>""", str(e).encode(), b"""</p> u"".join(u"<p>%s</p>" % cgi.escape(s) for s in type(u"")(e).split(u"\n")).encode('utf-8'),
b"""
</body> </body>
</html> </html>
""" ] """ ]