Commit 1aec31a1 authored by lpsolit%gmail.com's avatar lpsolit%gmail.com

Bug 264785: config.rdf needs XML filtering of output to generate valid HTML…

Bug 264785: config.rdf needs XML filtering of output to generate valid HTML (Template-Toolkit 2.15 and older do not escape all reserved characters correctly) - Patch by Fré©ric Buclin <LpSolit@gmail.com> r/a=mkanat
parent 393cb39f
...@@ -74,7 +74,7 @@ from '[% product.name FILTER html %]' product ...@@ -74,7 +74,7 @@ from '[% product.name FILTER html %]' product
<tr> <tr>
<td valign="top">Product Milestone URL:</td> <td valign="top">Product Milestone URL:</td>
<td valign="top"> <td valign="top">
<a href="[% product.milestone_url FILTER uri %]"> <a href="[% product.milestone_url FILTER html %]">
[% product.milestone_url FILTER html %] [% product.milestone_url FILTER html %]
</a> </a>
</td> </td>
......
...@@ -89,7 +89,7 @@ ...@@ -89,7 +89,7 @@
<td>Milestone URL:</td> <td>Milestone URL:</td>
<td> <td>
[% IF product.milestone_url %] [% IF product.milestone_url %]
<a href="[% product.milestone_url FILTER uri %]"> <a href="[% product.milestone_url FILTER html %]">
[%- product.milestone_url FILTER html %] [%- product.milestone_url FILTER html %]
</a> </a>
[% ELSE %] [% ELSE %]
......
...@@ -143,10 +143,10 @@ ...@@ -143,10 +143,10 @@
<span class="summ_text">[%+ bug.short_desc FILTER html %]</span> <span class="summ_text">[%+ bug.short_desc FILTER html %]</span>
<span class="summ_info">[[% INCLUDE buginfo %]]</span> <span class="summ_info">[[% INCLUDE buginfo %]]</span>
</a> </a>
<a href="showdependencytree.cgi?id=[% bugid FILTER uri %]" <a href="showdependencytree.cgi?id=[% bugid FILTER url_quote %]"
class="tree_link"> class="tree_link">
<img src="skins/standard/dependency-tree/tree.png" <img src="skins/standard/dependency-tree/tree.png"
title="See dependency tree for [% terms.bug %] [%+ bugid FILTER uri %]"> title="See dependency tree for [% terms.bug %] [%+ bugid FILTER html %]">
</a> </a>
[% END %] [% END %]
[% END %] [% END %]
......
...@@ -117,13 +117,13 @@ ...@@ -117,13 +117,13 @@
<Seq> <Seq>
[% FOREACH product = products %] [% FOREACH product = products %]
<li> <li>
<bz:product rdf:about="[% urlbase FILTER xml %]product.cgi?name=[% product.name FILTER uri %]"> <bz:product rdf:about="[% urlbase FILTER xml %]product.cgi?name=[% product.name FILTER url_quote %]">
<bz:name>[% product.name FILTER html %]</bz:name> <bz:name>[% product.name FILTER html %]</bz:name>
<bz:components> <bz:components>
<Seq> <Seq>
[% FOREACH component = product.components %] [% FOREACH component = product.components %]
<li resource="[% urlbase FILTER xml %]component.cgi?name=[% component.name FILTER uri %]"/> <li resource="[% urlbase FILTER xml %]component.cgi?name=[% component.name FILTER url_quote %]"/>
[% END %] [% END %]
</Seq> </Seq>
</bz:components> </bz:components>
...@@ -131,7 +131,7 @@ ...@@ -131,7 +131,7 @@
<bz:versions> <bz:versions>
<Seq> <Seq>
[% FOREACH version = product.versions %] [% FOREACH version = product.versions %]
<li resource="[% urlbase FILTER xml %]version.cgi?name=[% version.name FILTER uri %]"/> <li resource="[% urlbase FILTER xml %]version.cgi?name=[% version.name FILTER url_quote %]"/>
[% END %] [% END %]
</Seq> </Seq>
</bz:versions> </bz:versions>
...@@ -140,7 +140,7 @@ ...@@ -140,7 +140,7 @@
<bz:target_milestones> <bz:target_milestones>
<Seq> <Seq>
[% FOREACH milestone = product.milestones %] [% FOREACH milestone = product.milestones %]
<li resource="[% urlbase FILTER xml %]milestone.cgi?name=[% milestone.name FILTER uri %]"/> <li resource="[% urlbase FILTER xml %]milestone.cgi?name=[% milestone.name FILTER url_quote %]"/>
[% END %] [% END %]
</Seq> </Seq>
</bz:target_milestones> </bz:target_milestones>
...@@ -157,7 +157,7 @@ ...@@ -157,7 +157,7 @@
[% FOREACH product = products %] [% FOREACH product = products %]
[% FOREACH component = product.components %] [% FOREACH component = product.components %]
<li> <li>
<bz:component rdf:about="[% urlbase FILTER xml %]component.cgi?name=[% component.name FILTER uri %]"> <bz:component rdf:about="[% urlbase FILTER xml %]component.cgi?name=[% component.name FILTER url_quote %]">
<bz:name>[% component.name FILTER html %]</bz:name> <bz:name>[% component.name FILTER html %]</bz:name>
</bz:component> </bz:component>
</li> </li>
...@@ -171,7 +171,7 @@ ...@@ -171,7 +171,7 @@
[% FOREACH product = products %] [% FOREACH product = products %]
[% FOREACH version = product.versions %] [% FOREACH version = product.versions %]
<li> <li>
<bz:version rdf:about="[% urlbase FILTER xml %]version.cgi?name=[% version.name FILTER uri %]"> <bz:version rdf:about="[% urlbase FILTER xml %]version.cgi?name=[% version.name FILTER url_quote %]">
<bz:name>[% version.name FILTER html %]</bz:name> <bz:name>[% version.name FILTER html %]</bz:name>
</bz:version> </bz:version>
</li> </li>
...@@ -186,7 +186,7 @@ ...@@ -186,7 +186,7 @@
[% FOREACH product = products %] [% FOREACH product = products %]
[% FOREACH milestone = product.milestones %] [% FOREACH milestone = product.milestones %]
<li> <li>
<bz:target_milestone rdf:about="[% urlbase FILTER xml %]milestone.cgi?name=[% milestone.name FILTER uri %]"> <bz:target_milestone rdf:about="[% urlbase FILTER xml %]milestone.cgi?name=[% milestone.name FILTER url_quote %]">
<bz:name>[% milestone.name FILTER html %]</bz:name> <bz:name>[% milestone.name FILTER html %]</bz:name>
</bz:target_milestone> </bz:target_milestone>
</li> </li>
...@@ -201,7 +201,7 @@ ...@@ -201,7 +201,7 @@
[% PROCESS "global/field-descs.none.tmpl" %] [% PROCESS "global/field-descs.none.tmpl" %]
[% FOREACH item = field %] [% FOREACH item = field %]
<li> <li>
<bz:field rdf:about="[% urlbase FILTER xml %]field.cgi?name=[% item.name FILTER uri %]"> <bz:field rdf:about="[% urlbase FILTER xml %]field.cgi?name=[% item.name FILTER url_quote %]">
<bz:name>[% item.name FILTER html %]</bz:name> <bz:name>[% item.name FILTER html %]</bz:name>
<bz:description>[% (field_descs.${item.name} OR item.description) FILTER html %]</bz:description> <bz:description>[% (field_descs.${item.name} OR item.description) FILTER html %]</bz:description>
</bz:field> </bz:field>
......
...@@ -57,11 +57,11 @@ END:VCALENDAR ...@@ -57,11 +57,11 @@ END:VCALENDAR
[% END %] [% END %]
[% BLOCK ics_uid %] [% BLOCK ics_uid %]
[% "${bug_id}@${base_url}" FILTER uri FILTER ics('UID') %] [% "${bug_id}@${base_url}" FILTER url_quote FILTER ics('UID') %]
[% END %] [% END %]
[% BLOCK ics_url %] [% BLOCK ics_url %]
[% "${base_url}show_bug.cgi?id=${bug_id}" FILTER uri FILTER ics('URL;VALUE=URI') %] [% "${base_url}show_bug.cgi?id=${bug_id}" FILTER url_quote FILTER ics('URL;VALUE=URI') %]
[% END %] [% END %]
[% BLOCK ics_dtstart %] [% BLOCK ics_dtstart %]
......
...@@ -119,13 +119,13 @@ ...@@ -119,13 +119,13 @@
[% "Unknown" IF NOT users.$userid %] [% "Unknown" IF NOT users.$userid %]
</td> </td>
<td> <td>
<a href="quips.cgi?action=delete&amp;quipid=[% quipid FILTER uri%]"> <a href="quips.cgi?action=delete&amp;quipid=[% quipid FILTER url_quote %]">
Delete Delete
</a> </a>
</td> </td>
<td> <td>
<input type="checkbox" name="quipid_[% quipid FILTER uri%]" <input type="checkbox" name="quipid_[% quipid FILTER html %]"
id="quipid_[% quipid FILTER uri%]" id="quipid_[% quipid FILTER html %]"
[%- ' checked="checked"' IF quips.$quipid.approved %]> [%- ' checked="checked"' IF quips.$quipid.approved %]>
</td> </td>
</tr> </tr>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment