Mercurial > dive4elements > gnv-client
comparison gnv/src/main/java/de/intevation/gnv/action/ArtifactDatabaseActionBase.java @ 705:f550bd27a3f1
Html characters in strings inserted by the user are quoted (issue221).
gnv/trunk@969 c6561f87-3c4e-4783-a992-168aeb5c3f6f
| author | Ingo Weinzierl <ingo.weinzierl@intevation.de> |
|---|---|
| date | Thu, 22 Apr 2010 12:58:44 +0000 |
| parents | 89ade245ca7a |
| children | 0441e78cd900 |
comparison
equal
deleted
inserted
replaced
| 704:ae946acba005 | 705:f550bd27a3f1 |
|---|---|
| 47 protected ActionForward getExceptionForward(ActionMapping mapping) { | 47 protected ActionForward getExceptionForward(ActionMapping mapping) { |
| 48 log.debug("ArtifactDatabaseActionBase.getExceptionForward"); | 48 log.debug("ArtifactDatabaseActionBase.getExceptionForward"); |
| 49 ActionForward lForward = mapping.findForward(EXCEPTION_FORWARD_ID); | 49 ActionForward lForward = mapping.findForward(EXCEPTION_FORWARD_ID); |
| 50 return lForward; | 50 return lForward; |
| 51 } | 51 } |
| 52 | |
| 53 | |
| 54 protected String encode(String s) { | |
| 55 log.debug("String to encode: " + s); | |
| 56 s = s.replaceAll("<", "<"); | |
| 57 s = s.replaceAll(">", ">"); | |
| 58 s = s.replaceAll("\"", """); | |
| 59 s = s.replaceAll("&", "&"); | |
| 60 | |
| 61 log.debug("Encoded string: " + s); | |
| 62 return s; | |
| 63 } | |
| 64 | |
| 65 | |
| 66 protected String[] encode(String[] s) { | |
| 67 if (s == null) | |
| 68 return null; | |
| 69 | |
| 70 String[] good = new String[s.length]; | |
| 71 for (int i = 0; i < good.length; i++) { | |
| 72 good[i] = encode(s[i]); | |
| 73 } | |
| 74 | |
| 75 return good; | |
| 76 } | |
| 52 } | 77 } |
| 53 // vim:set ts=4 sw=4 si et sta sts=4 fenc=utf8 : | 78 // vim:set ts=4 sw=4 si et sta sts=4 fenc=utf8 : |