- escape html for adds and queries

- change config separator char
- fix enter in add boxes
- fix alt and title tags
This commit is contained in:
zzz
2012-01-25 16:22:04 +00:00
parent 0d494c50af
commit 6e44710b94
4 changed files with 18 additions and 8 deletions

View File

@ -7,6 +7,8 @@ import java.util.Iterator;
import java.util.Set;
import java.util.Map;
import net.i2p.data.DataHelper;
/**
* Simple home page configuration.
*
@ -68,8 +70,8 @@ public class ConfigHomeHandler extends FormHandler {
addFormError(_("No URL entered"));
return;
}
name = name.replace(";", "");
url = url.replace(";", "");
name = DataHelper.escapeHTML(name).replace(",", ","); // HomeHelper.S
url = DataHelper.escapeHTML(url).replace(",", ",");
HomeHelper.App app = new HomeHelper.App(name, "", url, "/themes/console/images/itoopie_sm.png");
apps.add(app);
addFormNotice(_("Added") + ": " + app.name);

View File

@ -18,7 +18,7 @@ import net.i2p.util.PortMapper;
*/
public class HomeHelper extends HelperBase {
private static final char S = ';';
private static final char S = ',';
private static final String I = "/themes/console/images/";
static final String PROP_SERVICES = "routerconsole.services";
static final String PROP_FAVORITES = "routerconsole.favorites";
@ -150,14 +150,14 @@ public class HomeHelper extends HelperBase {
buf.append("<div class=\"appgroup\">");
for (App app : apps) {
buf.append("<div class=\"app\">" +
"<a href=\"").append(app.url).append("\" alt=\"\" title=\"").append(app.desc).append("\">" +
"<a href=\"").append(app.url).append("\">" +
"<img class=\"");
// toopie is 54x68, not 16x16, needs special alignment and sizing
if (app.icon.endsWith("/itoopie_sm.png"))
buf.append("app2p");
else
buf.append("app");
buf.append("\" alt=\"\" src=\"").append(app.icon).append("\"></a><br>\n" +
buf.append("\" alt=\"\" title=\"").append(app.desc).append("\" src=\"").append(app.icon).append("\"></a><br>\n" +
"<table class=\"app\"><tr class=\"app\"><td class=\"app\">" +
"<div class=\"applabel\">" +
"<a href=\"").append(app.url).append("\" title=\"").append(app.desc).append("\">").append(app.name).append("</a>" +

View File

@ -3,6 +3,7 @@ package net.i2p.router.web;
import java.util.Map;
import java.util.TreeMap;
import net.i2p.data.DataHelper;
import net.i2p.util.PortMapper;
/**
@ -16,7 +17,7 @@ public class SearchHelper extends HelperBase {
private String _query;
private Map<String, String> _engines = new TreeMap();
private static final char S = ';';
private static final char S = ',';
static final String PROP_ENGINES = "routerconsole.searchEngines";
private static final String PROP_DEFAULT = "routerconsole.searchEngine";
@ -84,14 +85,13 @@ public class SearchHelper extends HelperBase {
public String getURL() {
if (_engine == null || _query == null)
return null;
_query = _query.trim();
_query = DataHelper.escapeHTML(_query).trim();
if (_query.length() <= 0)
return null;
buildEngineMap();
String url = _engines.get(_engine);
if (url == null)
return null;
// _query = escape query
if (url.contains("%s"))
url = url.replace("%s", _query);
else