diff options
| author | tobez <tobez@FreeBSD.org> | 2003-09-30 16:33:57 +0800 |
|---|---|---|
| committer | tobez <tobez@FreeBSD.org> | 2003-09-30 16:33:57 +0800 |
| commit | 54c41ca2edce37e21b1a13a21c85552c7e7cec10 (patch) | |
| tree | 61b39c792efba3211469540258247df4d5e8d414 /lang/perl5 | |
| parent | cc46168add3e942dce9144f904d3cc1f0b6b2f92 (diff) | |
| download | freebsd-ports-gnome-54c41ca2edce37e21b1a13a21c85552c7e7cec10.tar.gz freebsd-ports-gnome-54c41ca2edce37e21b1a13a21c85552c7e7cec10.tar.zst freebsd-ports-gnome-54c41ca2edce37e21b1a13a21c85552c7e7cec10.zip | |
Add a patch to properly escape generated action attribute in
CGI::start_form. The escape code is taken from CGI.pm v.3.00.
PR: 57391
Reported by: IIJIMA Hiromitsu <delmonta@ht.sakura.ne.jp>
Diffstat (limited to 'lang/perl5')
| -rw-r--r-- | lang/perl5/Makefile | 2 | ||||
| -rw-r--r-- | lang/perl5/files/patch-CGI.pm | 15 |
2 files changed, 16 insertions, 1 deletions
diff --git a/lang/perl5/Makefile b/lang/perl5/Makefile index 4546fc219317..39b169c73059 100644 --- a/lang/perl5/Makefile +++ b/lang/perl5/Makefile @@ -7,7 +7,7 @@ PORTNAME= perl PORTVERSION= ${PERL_VER} -PORTREVISION= 13 +PORTREVISION= 14 CATEGORIES= lang devel perl5 MASTER_SITES= ${MASTER_SITE_PERL_CPAN} \ ${MASTER_SITE_LOCAL:S/$/:local/} diff --git a/lang/perl5/files/patch-CGI.pm b/lang/perl5/files/patch-CGI.pm new file mode 100644 index 000000000000..01410684a7ed --- /dev/null +++ b/lang/perl5/files/patch-CGI.pm @@ -0,0 +1,15 @@ +--- lib/CGI.pm.orig Tue Sep 30 10:16:33 2003 ++++ lib/CGI.pm Tue Sep 30 10:20:35 2003 +@@ -1497,8 +1497,10 @@ sub startform { + $method = lc($method) || 'post'; + $enctype = $enctype || &URL_ENCODED; + unless (defined $action) { +- $action = $self->url(-absolute=>1,-path=>1); +- $action .= "?$ENV{QUERY_STRING}" if $ENV{QUERY_STRING}; ++ $action = $self->escapeHTML($self->url(-absolute=>1,-path=>1)); ++ if (length($ENV{QUERY_STRING})>0) { ++ $action .= "?".$self->escapeHTML($ENV{QUERY_STRING},1); ++ } + } + $action = qq(action="$action"); + my($other) = @other ? " @other" : ''; |