diff options
| author | Xavier Roche <xroche@users.noreply.github.com> | 2014-05-28 18:31:40 +0000 |
|---|---|---|
| committer | Xavier Roche <xroche@users.noreply.github.com> | 2014-05-28 18:31:40 +0000 |
| commit | 27752e368cc8e6325894d3a2a31f3faa80cbd93f (patch) | |
| tree | 4a3e1609b17eef009d256926a8793e17237d16ae /src/htsparse.c | |
| parent | 37187f967fb2a2c7257fdc1965c16381ffed4a2c (diff) | |
Rewrite template formatting to be format-injection proof.
Diffstat (limited to 'src/htsparse.c')
| -rw-r--r-- | src/htsparse.c | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/src/htsparse.c b/src/htsparse.c index e49b00f..53872b5 100644 --- a/src/htsparse.c +++ b/src/htsparse.c @@ -207,9 +207,9 @@ Please visit our Website: http://www.httrack.com sprintf(tempo,"<meta HTTP-EQUIV=\"Refresh\" CONTENT=\"0; URL=%s\">"CRLF,link_escaped); \ } else \ tempo[0]='\0'; \ - fprintf(makeindex_fp,template_footer, \ + hts_template_format(makeindex_fp,template_footer, \ "<!-- Mirror and index made by HTTrack Website Copier/"HTTRACK_VERSION" "HTTRACK_AFF_AUTHORS" -->", \ - tempo \ + tempo, /* EOF */ NULL \ ); \ fflush(makeindex_fp); \ fclose(makeindex_fp); /* à ne pas oublier sinon on passe une nuit blanche */ \ @@ -587,9 +587,9 @@ int htsparse(htsmoduleStruct * str, htsmoduleStructExtended * stre) { if (makeindex_fp != NULL) { // Header - fprintf(makeindex_fp, template_header, + hts_template_format(makeindex_fp, template_header, "<!-- Mirror and index made by HTTrack Website Copier/" - HTTRACK_VERSION " " HTTRACK_AFF_AUTHORS " -->"); + HTTRACK_VERSION " " HTTRACK_AFF_AUTHORS " -->", /* EOF */ NULL); } else makeindex_done = -1; // fait, erreur @@ -651,7 +651,7 @@ int htsparse(htsmoduleStruct * str, htsmoduleStructExtended * stre) { // Body inplace_escape_uri_utf(tempo, sizeof(tempo)); - fprintf(makeindex_fp, template_body, tempo, s); + hts_template_format(makeindex_fp, template_body, tempo, s, /* EOF */ NULL); } } } |