Anubis / Xlib

Commit 8b5f5b4978d2e851872a65d8ccf0e9b9352269bd

Authored by totoro
1 parent 72f464e5

url_quote the value of the web_arg. This prevent to break the argument with valu… 

…e which contain some = or ' etc... like in sql query
Showing 2 changed files with 3 additions and 2 deletions   Show diff stats
Inline Side-by-side
web/CXM_multihost_http_server.anubis
  Show/Hide comments   View file @8b5f5b4
... ... @@ -2419,7 +2419,7 @@ define One
2419 2419 with size = file_size(f),
2420 2420 since split_filename_extension(absolute_path) is (filename, extension),
2421 2421 with mime_type = get_MIME_from_extension("."+extension),
2422   - println("send file answer: "+filename+" ext: "+extension+ " uri :" +uri);
  2422 + //println("send file answer: "+filename+" ext: "+extension+ " uri :" +uri);
2423 2423 send_file(
2424 2424 desc,
2425 2425 connection,
... ...
web/CXM_web_action.anubis
  Show/Hide comments   View file @8b5f5b4
... ... @@ -9,6 +9,7 @@
9 9 read system/string.anubis
10 10  
11 11 transmit calexium_lib/web/types/web_action_name.anubis
  12 +transmit calexium_lib/web/CXM_urllib.anubis
12 13 //public type WEB_Action_Name:
13 14 // controller_action(
14 15 // String controller,
... ... @@ -31,7 +32,7 @@ public define String
31 32 if length(l_args) = 0 then
32 33 ""
33 34 else
34   - "&"+join("&", map(((String, String) arg) |-> since arg is (name, value), name+"="+value, l_args))
  35 + "&"+join("&", map(((String, String) arg) |-> since arg is (name, value), name+"="+url_quote(value), l_args))
35 36 .
36 37  
37 38 public define String
... ...