diff options
| author | Niels Heinen <niels@FreeBSD.org> | 2010-05-12 09:13:54 +0000 |
|---|---|---|
| committer | Niels Heinen <niels@FreeBSD.org> | 2010-05-12 09:13:54 +0000 |
| commit | 309ceeea6a56b8c702e612e8fdb1c9f7b9246a26 (patch) | |
| tree | 4cb6d58d5aa67fa2f73e8eb2d8c83c2fd6deed37 /devel/lxr/files/patch-fix-clean_identifier | |
| parent | - Update to 4.4.3 release instead of obliviously committed 4.4.2 (diff) | |
Added security patch for XSS vulnerability (CVE-2009-4497)
PR: ports/146337
Submitted by: Eygene Ryabinkin (maintainer)
Approved by: itetcu (mentor, implicit)
Security: http://www.vuxml.org/freebsd/0491d15a-5875-11df-8d80-0015587e2cc1.html
Notes
Notes:
svn path=/head/; revision=254185
Diffstat (limited to 'devel/lxr/files/patch-fix-clean_identifier')
| -rw-r--r-- | devel/lxr/files/patch-fix-clean_identifier | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/devel/lxr/files/patch-fix-clean_identifier b/devel/lxr/files/patch-fix-clean_identifier new file mode 100644 index 000000000000..5751a87f6561 --- /dev/null +++ b/devel/lxr/files/patch-fix-clean_identifier @@ -0,0 +1,20 @@ +Obtained-From: http://lxr.cvs.sourceforge.net/viewvc/lxr/lxr/lib/LXR/Common.pm?r1=1.62&r2=1.63&view=patch +Modified-As: two first hunks containing $Id$ changes were removed to allow clean patching + +--- a/lib/LXR/Common.pm 2009/05/10 11:54:29 1.62 ++++ b/lib/LXR/Common.pm 2010/01/05 17:59:38 1.63 +@@ -526,9 +526,13 @@ + } + + sub clean_identifier { ++ # Cleans up the identifier parameter ++ # Result should be HTML-safe and a valid identifier in ++ # any supported language... ++ # Well, not Lisp symbols since they can contain anything + my $id = shift; + +- $id =~ s/(^[\w`:.,]+).*/$1/ if defined $id; ++ $id =~ s/[^\w`:.,\-_ ]//g if defined $id; + + return $id; + } |