pjfanning opened a new pull request, #1191: URL: https://github.com/apache/pekko-http/pull/1191
Added escapeHtml methods to the DirectoryListing object that escape the five HTML special characters (&, <, >, ", '). Applied to all user-controlled strings in the directory listing HTML: - path in <title> and <h1> tags - path in the "../" parent directory link href - path + name in file/directory link hrefs (via the two-argument overload, avoiding an intermediate string concatenation) - name as link text content -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
