PsychoticNinja/ChanTracker
1
0
Fork 0
mirror of https://github.com/ncoevoet/ChanTracker.git synced 2025-04-25 20:41:19 -05:00
Code Issues Projects Releases Wiki Activity

HTML-escape logs on web page.

Browse Source
This commit is contained in:
Krytarik Raido 2021-06-29 04:56:04 +02:00
parent 7de2ddf161
commit 980d067bf3
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
server.py
View File

@ -181,7 +181,8 @@ class MyHandler(http.server.BaseHTTPRequestHandler):
body.append('<ul>')
for line in log.split('\n'):
if line != '':
body.append('<li>%s</li>' % line)
body.append('<li>%s</li>' % line.replace(
'&','&amp;').replace('<','&lt;').replace('>','&gt;').replace('"','&quot;'))
body.append('</ul>')
c.execute("""SELECT oper,at,comment FROM comments WHERE ban_id=?""",(id,))
r = c.fetchall()