Author: nextgens
Date: 2006-08-09 14:19:27 +0000 (Wed, 09 Aug 2006)
New Revision: 9998
Modified:
trunk/freenet/src/freenet/clients/http/PageMaker.java
Log:
we should HTMLEncode titles
Modified: trunk/freenet/src/freenet/clients/http/PageMaker.java
===================================================================
--- trunk/freenet/src/freenet/clients/http/PageMaker.java 2006-08-09
13:42:49 UTC (rev 9997)
+++ trunk/freenet/src/freenet/clients/http/PageMaker.java 2006-08-09
14:19:27 UTC (rev 9998)
@@ -12,6 +12,7 @@
import java.util.jar.JarEntry;
import java.util.jar.JarFile;
+import freenet.support.HTMLEncoder;
import freenet.support.Logger;
/** Simple class to output standard heads and tail for web interface pages.
@@ -61,12 +62,13 @@
}
public void makeBottomHead(StringBuffer buf, String title, boolean
navbars) {
- buf.append("<title>"+title+" - Freenet</title>\n"
+ String sanitizedTitle = HTMLEncoder.encode(title);
+ buf.append("<title>"+sanitizedTitle+" - Freenet</title>\n"
+ "</head>\n"
+ "<body>\n"
+ "<div id=\"page\">\n"
+ "<div id=\"topbar\">\n"
- + "<h1>"+title+"</h1>\n"
+ + "<h1>"+sanitizedTitle+"</h1>\n"
+ "</div>\n");
if (navbars) this.makeNavBar(buf);
buf.append("<div id=\"content\">\n");