Author: nextgens
Date: 2006-08-09 14:19:27 +0000 (Wed, 09 Aug 2006)
New Revision: 9998

Modified:
   trunk/freenet/src/freenet/clients/http/PageMaker.java
Log:
we should HTMLEncode titles

Modified: trunk/freenet/src/freenet/clients/http/PageMaker.java
===================================================================
--- trunk/freenet/src/freenet/clients/http/PageMaker.java       2006-08-09 
13:42:49 UTC (rev 9997)
+++ trunk/freenet/src/freenet/clients/http/PageMaker.java       2006-08-09 
14:19:27 UTC (rev 9998)
@@ -12,6 +12,7 @@
 import java.util.jar.JarEntry;
 import java.util.jar.JarFile;

+import freenet.support.HTMLEncoder;
 import freenet.support.Logger;

 /** Simple class to output standard heads and tail for web interface pages. 
@@ -61,12 +62,13 @@
        }

        public void makeBottomHead(StringBuffer buf, String title, boolean 
navbars) {
-               buf.append("<title>"+title+" - Freenet</title>\n"
+               String sanitizedTitle = HTMLEncoder.encode(title);
+               buf.append("<title>"+sanitizedTitle+" - Freenet</title>\n"
                                + "</head>\n"
                                + "<body>\n"
                                + "<div id=\"page\">\n"
                                + "<div id=\"topbar\">\n"
-                               + "<h1>"+title+"</h1>\n"
+                               + "<h1>"+sanitizedTitle+"</h1>\n"
                                + "</div>\n");
                if (navbars) this.makeNavBar(buf);
                buf.append("<div id=\"content\">\n");


Reply via email to