kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2025-10-12 15:45:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Issue #9068 - make sure we quote HTML characters correctly too (seanbright)

Browse Source 
git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@54774 65c4cc65-6c06-0410-ace0-fbb531ad65f3
This commit is contained in:
Olle Johansson
2007-02-16 11:47:48 +00:00
parent 71c7f6e32f
commit 33915a153a
1 changed files with 39 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

42
res/res_agi.c
View File

@@ -1941,6 +1941,37 @@ static int handle_showagi(int fd, int argc, char *argv[])
return RESULT_SUCCESS;
}
/*! \brief Convert string to use HTML escaped characters
\note Maybe this should be a generic function?
*/
static void write_html_escaped(FILE *htmlfile, char *str)
{
char *cur = str;
while(*cur) {
switch (*cur) {
case '<':
fprintf(htmlfile, "%s", "&lt;");
break;
case '>':
fprintf(htmlfile, "%s", "&gt;");
break;
case '&':
fprintf(htmlfile, "%s", "&amp;");
break;
case '"':
fprintf(htmlfile, "%s", "&quot;");
break;
default:
fprintf(htmlfile, "%c", *cur);
break;
}
cur++;
}
return;
}
static int handle_agidumphtml(int fd, int argc, char *argv[])
{
struct agi_command *e;
@@ -1979,11 +2010,16 @@ static int handle_agidumphtml(int fd, int argc, char *argv[])
stringp=e->usage;
tempstr = strsep(&stringp, "\n");
fprintf(htmlfile, "<TR><TD ALIGN=\"CENTER\">%s</TD></TR>\n", tempstr);
fprintf(htmlfile, "<TR><TD ALIGN=\"CENTER\">");
write_html_escaped(htmlfile, tempstr);
fprintf(htmlfile, "</TD></TR>\n");
fprintf(htmlfile, "<TR><TD ALIGN=\"CENTER\">\n");
while ((tempstr = strsep(&stringp, "\n")) != NULL)
fprintf(htmlfile, "%s<BR>\n",tempstr);
while ((tempstr = strsep(&stringp, "\n")) != NULL) {
write_html_escaped(htmlfile, tempstr);
fprintf(htmlfile, "<BR>\n");
}
fprintf(htmlfile, "</TD></TR>\n");
fprintf(htmlfile, "</TABLE></TD></TR>\n\n");