From 1720f2e945b9542f7189c61ca04120ed8ddfd117 Mon Sep 17 00:00:00 2001 From: Stefan Ritt Date: Thu, 6 Sep 2007 19:10:51 +0000 Subject: [PATCH] Fixed a few other XSS vulnerabilities SVN revision: 1911 --- src/elogd.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/elogd.c b/src/elogd.c index 7b31f14c..6acd9a10 100755 --- a/src/elogd.c +++ b/src/elogd.c @@ -19120,7 +19120,7 @@ void show_elog_list(LOGBOOK * lbs, int past_n, int last_n, int page_n, BOOL defa strlcat(line, " | ", sizeof(line)); if (comment[0] == 0) - strlcat(line, getparam(iattr), sizeof(line)); + strencode2(line+strlen(line), getparam(iattr), sizeof(line)-strlen(line)); else strlcat(line, comment, sizeof(line)); } @@ -19137,7 +19137,7 @@ void show_elog_list(LOGBOOK * lbs, int past_n, int last_n, int page_n, BOOL defa strlcat(line, " | ", sizeof(line)); if (comment[0] == 0) - strlcat(line, getparam(attr_list[i]), sizeof(line)); + strencode2(line+strlen(line), getparam(attr_list[i]), sizeof(line)-strlen(line)); else strlcat(line, comment, sizeof(line)); } @@ -19164,7 +19164,7 @@ void show_elog_list(LOGBOOK * lbs, int past_n, int last_n, int page_n, BOOL defa if (isparam(attr_list[i])) { if (line[0]) strlcat(line, " | ", sizeof(line)); - strlcat(line, getparam(attr_list[i]), sizeof(line)); + strencode2(line+strlen(line), getparam(attr_list[i]), sizeof(line)-strlen(line)); } if (line[0]) {