mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-01-06 07:27:47 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Added escaping of double quotes in ngx_escape_html().

Browse Source 
Patch by Zaur Abasmirzoev.
This commit is contained in:
Maxim Dounin 2011-11-25 16:36:02 +00:00
parent 13717da19e
commit 1b9b19d7e2
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/core/ngx_string.c
View File

@ -1657,6 +1657,10 @@ ngx_escape_html(u_char *dst, u_char *src, size_t size)
len += sizeof("&") - 2; len += sizeof("&") - 2;
break; break;
case '"':
len += sizeof(""") - 2;
break;
default: default:
break; break;
} }
@ -1684,6 +1688,11 @@ ngx_escape_html(u_char *dst, u_char *src, size_t size)
*dst++ = ';'; *dst++ = ';';
break; break;
case '"':
*dst++ = '&'; *dst++ = 'q'; *dst++ = 'u'; *dst++ = 'o';
*dst++ = 't'; *dst++ = ';';
break;
default: default:
*dst++ = ch; *dst++ = ch;
break; break;