Wikka : Mod027bCodeFormatterInsecurity

HomePage :: Categories :: Index :: Changes :: Comments :: Documentation :: Blog :: Login/Register

Wikka Mod 027

Type: Bug Fix

Credit:

PsychoMark
WakkaCustomization @ WakkaWiki


formatters\code.php
New:
<?php
print("<pre>".htmlentities($text)."</pre>");
?>


Old:
<?php
print("<pre>".$text."</pre>");
?>



HTML codes in code blocks are not escaped by default. This caused me some problems with posting an XML snippet, so I changed formatters\code.php.

It's not like I'll be using HTML codes in code blocks anyways :)

-- PsychoMark
There are no comments on this page. [Add comment]
Valid XHTML 1.0 Transitional :: Valid CSS :: Powered by WikkaWiki
Page was generated in 0.2110 seconds