mbirth/LuckyCoinkydink
1
0
Fork 0
Code Issues Pull Requests Activity

Proper unescape. Thanks to Stefan Esser

Browse Source
This commit is contained in:
Garvin Hicking 2006-10-05 14:05:35 +00:00
parent 68f51cd5af
commit 20dce86770
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
include/functions_config.inc.php
View File

@ -542,10 +542,10 @@ function serendipity_restoreVar(&$source, &$target) {
* @return null * @return null
*/ */
function serendipity_JSsetCookie($name, $value) { function serendipity_JSsetCookie($name, $value) {
$name = strtr($name, array('\\'=>'\\\\',"'"=>"\\'",'"'=>'\\"',"\r"=>'\\r',"\n"=>'\\n','</'=>'<\/')); $name = htmlentities($name);
$value = strtr($value, array('\\'=>'\\\\',"'"=>"\\'",'"'=>'\\"',"\r"=>'\\r',"\n"=>'\\n','</'=>'<\/')); $value = urlencode($value);
echo '<script type="text/javascript">SetCookie("' . $name . '", "' . $value . '")</script>' . "\n"; echo '<script type="text/javascript">SetCookie("' . $name . '", unescape("' . $value . '"))</script>' . "\n";
} }
/** /**