mirror of
https://github.com/galaxyproject/galaxy.git
synced 2026-10-25 00:12:08 +08:00
Escape everything
This commit is contained in:
@@ -205,7 +205,11 @@ class ErrorReporter( object ):
|
||||
)
|
||||
|
||||
self.report = string.Template( error_report_template ).safe_substitute( report_variables )
|
||||
# Escape the message for use in the HTML report
|
||||
|
||||
# Escape all of the content for use in the HTML report
|
||||
for parameter in report_variables.keys():
|
||||
report_variables[parameter] = cgi.escape(report_variables[parameter])
|
||||
|
||||
report_variables['message'] = cgi.escape(report_variables['message'])
|
||||
self.html_report = string.Template( error_report_template_html ).safe_substitute( report_variables )
|
||||
|
||||
|
||||
Reference in New Issue
Block a user