diff options
| author | chinsan <chinsan@FreeBSD.org> | 2007-07-23 18:57:28 +0800 |
|---|---|---|
| committer | chinsan <chinsan@FreeBSD.org> | 2007-07-23 18:57:28 +0800 |
| commit | e58a1d295c99cdb2aa4dba97e54dc07cc558bf73 (patch) | |
| tree | 8c6b7f4c992a1d0b70df40c4113d7aa914dd3748 /www | |
| parent | ba3aab44218ff12c6cf1dd766ac5acdda960cc1e (diff) | |
| download | freebsd-ports-gnome-e58a1d295c99cdb2aa4dba97e54dc07cc558bf73.tar.gz freebsd-ports-gnome-e58a1d295c99cdb2aa4dba97e54dc07cc558bf73.tar.zst freebsd-ports-gnome-e58a1d295c99cdb2aa4dba97e54dc07cc558bf73.zip | |
- Fix an XSS vulnerability.
http://bugs.splitbrain.org/index.php?do=details&task_id=1195
Approved by: rafan (mentor)
Diffstat (limited to 'www')
| -rw-r--r-- | www/dokuwiki/Makefile | 4 | ||||
| -rw-r--r-- | www/dokuwiki/files/patch-lib-exe-spellcheck.php | 11 |
2 files changed, 15 insertions, 0 deletions
diff --git a/www/dokuwiki/Makefile b/www/dokuwiki/Makefile index 7ebad5121054..8d62893d5cca 100644 --- a/www/dokuwiki/Makefile +++ b/www/dokuwiki/Makefile @@ -7,6 +7,7 @@ PORTNAME= dokuwiki PORTVERSION= ${DIST_VER:S/${PORTNAME}//:S/-//g} +PORTREVISION= 1 CATEGORIES= www MASTER_SITES= http://www.splitbrain.org/_media/projects/dokuwiki/ \ LOCAL/chinsan/${PORTNAME} @@ -36,6 +37,9 @@ x-generate-plist: ${SED} -e 's|^|@dirrm %%DOKUWIKI_DIR%%/|' >> ${TEMP_PLIST} \ && ${ECHO_CMD} "@dirrmtry %%DOKUWIKI_DIR%%" >> ${TEMP_PLIST} +post-patch: + @${REINPLACE_CMD} -ie 's|9|10|' ${WRKSRC}/conf/msg + do-install: # Data files -${MKDIR} ${PREFIX}/${DOKUWIKI_DIR} diff --git a/www/dokuwiki/files/patch-lib-exe-spellcheck.php b/www/dokuwiki/files/patch-lib-exe-spellcheck.php new file mode 100644 index 000000000000..a4d40ade8ae4 --- /dev/null +++ b/www/dokuwiki/files/patch-lib-exe-spellcheck.php @@ -0,0 +1,11 @@ +--- lib/exe/spellcheck.php.orig 2007-07-23 14:40:45.000000000 +0800 ++++ lib/exe/spellcheck.php 2007-07-23 14:39:30.000000000 +0800 +@@ -272,7 +272,7 @@ + * Just send data back as received for UTF-8 testing + */ + function spell_utf8test(){ +- print $_POST['data']; ++ print substr( $_POST['data'], 0, 3 ); + } + + /** |