CERBERUS/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2026-06-26 20:01:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Added escaping of double quotes in ngx_escape_html().

Browse source 
Patch by Zaur Abasmirzoev.
This commit is contained in:
Maxim Dounin 2011-11-25 16:36:02 +00:00
parent 13717da19e
commit 1b9b19d7e2
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/core/ngx_string.c
View file

@ -1657,6 +1657,10 @@ ngx_escape_html(u_char *dst, u_char *src, size_t size)
len += sizeof("&") - 2;
break;
case '"':
len += sizeof(""") - 2;
break;
default:
break;
}
@ -1684,6 +1688,11 @@ ngx_escape_html(u_char *dst, u_char *src, size_t size)
*dst++ = ';';
break;
case '"':
*dst++ = '&'; *dst++ = 'q'; *dst++ = 'u'; *dst++ = 'o';
*dst++ = 't'; *dst++ = ';';
break;
default:
*dst++ = ch;
break;