[GeneralDiscussion] applied to stable: fix an unsafe use of page name which could break editform (#1376, Noboyuku Koyoshi)
[email protected] (stable-repo)
| Newsgroups | gmane.comp.web.zope.zwiki |
|---|---|
| Message-ID | <20080502034024.B8ECC465D73__42972.6656912409$1209699707$gmane$org@mail.joyful.com> |
Thu May 1 20:39:08 PDT 2008 [email protected] * fix an unsafe use of page name which could break editform (#1376, Noboyuku Koyoshi) diff -rN -u old-ZWiki/skins/zwiki/editform.pt new-ZWiki/skins/zwiki/editform.pt --- old-ZWiki/skins/zwiki/editform.pt 2008-05-01 20:40:24.000000000 -0700 +++ new-ZWiki/skins/zwiki/editform.pt 2008-05-01 20:40:24.000000000 -0700 @@ -47,7 +47,7 @@ <input name="timeStamp" type="hidden" value="" tal:attributes="value timestamp" /> <input name="page" type="hidden" value="page" - tal:attributes="value page" /> + tal:attributes="value python:here.talsafe(page)" /> <input name="leaveplaceholder" value="" type="hidden" tal:condition="python:creating #no placeholder when creating" /> <div align="center"> -- forwarded from http://zwiki.org/GeneralDiscussion#[email protected]