-
-
Notifications
You must be signed in to change notification settings - Fork 77
XSS Fix #17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
XSS Fix #17
Conversation
…representations (Parser/Lists/Vector.pm didn't do this, and Value/Vector.pm didn't do it well.)
Make vectors use the context's i,j,k values to obtian TeX and string values
Essay Questions
@@ -29,7 +29,10 @@ =head1 DESCRIPTION | |||
|
|||
=cut | |||
|
|||
# this is equivalent to use strict, but can be used within the Safe compartment. | |||
#sub _PGbasicmacros_init {use HTML::Entities::encode_entities;} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this doesn't belong here I think. It only needs to be included once in the file, not everytime the file
is called. It can go at the top of the file.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I wasn't sure where to put packages where they would be usable within
PGAnswerMacro .... Feel free to move it
On Jun 2, 2013 10:41 PM, "Michael Gage" notifications@github.com wrote:
In macros/PGbasicmacros.pl:
@@ -29,7 +29,10 @@ =head1 DESCRIPTION
=cut
-# this is equivalent to use strict, but can be used within the Safe compartment.
+#sub _PGbasicmacros_init {use HTML::Entities::encode_entities;}this doesn't belong here I think. It only needs to be included once in the
file, not everytime the file
is called. It can go at the top of the file.—
Reply to this email directly or view it on GitHubhttps://github.com//pull/17/files#r4493451
.
…ixes Consolodate the category files into a single index.
Fix typo in Matrix doc and add a test.
A fix for a potential XSS attack. Scrubs some potential badness before problem is even saved and also tries to escape more printed html.