[GeneralDiscussion] applied to unstable: fix an unsafe use of page name which could break editform (#1376, Noboyuku Koyoshi)
[email protected] (unstable-repo)
| Newsgroups | gmane.comp.web.zope.zwiki |
|---|---|
| Message-ID | <20080502034042.B72B9465D73__40345.0908176184$1209699702$gmane$org@mail.joyful.com> |
Thu May 1 20:39:08 PDT 2008 [email protected] * fix an unsafe use of page name which could break editform (#1376, Noboyuku Koyoshi) diff -rN -u old-ZWiki-unstable/skins/zwiki/editform.pt new-ZWiki-unstable/skins/zwiki/editform.pt --- old-ZWiki-unstable/skins/zwiki/editform.pt 2008-05-01 20:40:42.000000000 -0700 +++ new-ZWiki-unstable/skins/zwiki/editform.pt 2008-05-01 20:40:42.000000000 -0700 @@ -46,7 +46,7 @@ <input name="timeStamp" type="hidden" value="" tal:attributes="value timestamp" /> <input name="page" type="hidden" value="page" - tal:attributes="value page" /> + tal:attributes="value python:here.talsafe(page)" /> <input name="leaveplaceholder" value="" type="hidden" tal:condition="python:creating #no placeholder when creating" /> <div align="center"> -- forwarded from http://zwiki.org/GeneralDiscussion#[email protected]