Changeset 3059

Timestamp:

12/12/07 00:47:23 (13 months ago)

Author:

tokuhirom

Message:

lang/perl/Moxy: fix xss

Files:

• lang/perl/Moxy/trunk/lib/Moxy/Plugin/Application.pm (modified) (2 diffs)

lang/perl/Moxy/trunk/lib/Moxy/Plugin/Application.pm

@@ -133 +133 @@
                         uri_escape(URI->new($href)->abs($base_url)) );
                 }
-                push @parts, map { sprintf qq{$_="%s"}, encode_entities($attr->{$_}) } keys %$attr;
+                push @parts, map { sprintf qq{%s="%s"}, encode_entities($_), encode_entities($attr->{$_}) } keys %$attr;
                 $output .= join " ", @parts;
                 $output .= ">";
@@ -159 +159 @@
                     );
                 }
-                push @parts, map { sprintf qq{$_="%s"}, encode_entities($attr->{$_}) } grep !/^\/$/, keys %$attr;
+                push @parts, map { sprintf qq{%s="%s"}, encode_entities($_), encode_entities($attr->{$_}) } grep !/^\/$/, keys %$attr;
                 $output .= join " ", @parts;
                 $output .= ">";