Changeset 447 for trunk/packages/sipb-xen-www/code/templates/functions.tmpl

Timestamp:

Apr 22, 2008, 1:37:50 AM (16 years ago)

Author:

ecprice

Message:

Avoid html injection.

Cheetah is painful.

File:

• trunk/packages/sipb-xen-www/code/templates/functions.tmpl (modified) (3 diffs)

trunk/packages/sipb-xen-www/code/templates/functions.tmpl

@@ +1 @@
+#filter WebSafe
 #def databaseList($lst, $default, $onchange, $name, $id, $valueattr, $descattr)
 <select name="$name" id="$id"#slurp
@@ -19 +20 @@
 
 #def cdromList($default="", $onchange=None)
+#filter None
 $databaseList(sorted($sipb_xen_database.CDROM.select(), key=lambda x: x.description),
               default, onchange, 'cdrom', 'cdromlist', 'cdrom_id', 'description')
+#end filter
 #end def
 
 #def autoList($default="", $onchange=None)
+#filter None
 $databaseList(sorted($sipb_xen_database.Autoinstall.select(), key=lambda x: x.description),
               default, onchange, 'autoinstall', 'autoinstalllist', 'autoinstall_id', 'description')
-## $databaseList(autos, default, onchange, 'autoinstall', 'autoinstalllist', 'autoinstall_id', 'description')
+#end filter
 #end def
 
@@ -54 +58 @@
 #end if
 #end def
-
+#filter None
 $full_body
+#end filter
+#end filter