Merge pull request #381 from atsampson/escapestatus
Escape server and user names in the status HTML
This commit is contained in:
commit
f25a20444b
1 changed files with 2 additions and 2 deletions
|
@ -1590,7 +1590,7 @@ void CServer::WriteHTMLChannelList()
|
|||
}
|
||||
|
||||
QTextStream streamFileOut ( &serverFileListFile );
|
||||
streamFileOut << strServerNameWithPort << endl << "<ul>" << endl;
|
||||
streamFileOut << strServerNameWithPort.toHtmlEscaped() << endl << "<ul>" << endl;
|
||||
|
||||
// depending on number of connected clients write list
|
||||
if ( GetNumberOfConnectedClients() == 0 )
|
||||
|
@ -1605,7 +1605,7 @@ void CServer::WriteHTMLChannelList()
|
|||
{
|
||||
if ( vecChannels[i].IsConnected() )
|
||||
{
|
||||
streamFileOut << " <li>" << vecChannels[i].GetName() << "</li>" << endl;
|
||||
streamFileOut << " <li>" << vecChannels[i].GetName().toHtmlEscaped() << "</li>" << endl;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue