From 58bdb8247e03630fad1b25cdb0d7dce697e8c29d Mon Sep 17 00:00:00 2001 From: Ben Longbons Date: Fri, 14 Jun 2013 10:52:20 -0700 Subject: Escape URL strings in news.html --- tools/_news_colors.py | 3 +++ world/map/news.html | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/tools/_news_colors.py b/tools/_news_colors.py index 8b0c00b9..e98f73bf 100644 --- a/tools/_news_colors.py +++ b/tools/_news_colors.py @@ -20,6 +20,8 @@ ## You should have received a copy of the GNU General Public License ## along with this program. If not, see . +import cgi + __all__ = ['make_html_colors_dict', 'make_txt_colors_dict'] class Color(object): @@ -49,6 +51,7 @@ class HtmlDate(object): class HtmlLink(object): __slots__ = () def __format__(self, target): + target = cgi.escape(target, True) return '%s' % (target, target) class HtmlSignature(object): diff --git a/world/map/news.html b/world/map/news.html index 7ff09d46..2d7ccba0 100644 --- a/world/map/news.html +++ b/world/map/news.html @@ -103,7 +103,7 @@ This means there was some downtime, starting at 16:00 UTC. Most work was done in 1.5 hours, with a brief shutdown later. DNS settings may take a while to propogate.

-For more information, see http://forums.themanaworld.org/viewtopic.php?f=1&t=17126 +For more information, see http://forums.themanaworld.org/viewtopic.php?f=1&t=17126

-the TMWC @@ -198,7 +198,7 @@ support, depending on exactly how old it is: Of course, if a particular client release is buggy, we may not be able to support it at all.

-For more details, see http://forums.themanaworld.org/viewtopic.php?f=4&t=16867. +For more details, see http://forums.themanaworld.org/viewtopic.php?f=4&t=16867.

ManaPlus is available at http://manaplus.evolonline.org/

-- cgit v1.2.3-70-g09d2