[interchange-cvs] interchange - jon modified lib/Vend/Page.pm

[interchange-cvs at icdevgroup.org]

User:      jon
Date:      2004-04-08 19:49:52 GMT
Modified:  lib/Vend Page.pm
Log:
Create global variable MV_SUBJECT before interpolating special_page/*
as a more secure alternative to [subject] pseudo-tag.

Revision  Changes    Path
2.19      +3 -2      interchange/lib/Vend/Page.pm


rev 2.19, prev_rev 2.18
Index: Page.pm
===================================================================
RCS file: /var/cvs/interchange/lib/Vend/Page.pm,v
retrieving revision 2.18
retrieving revision 2.19
diff -u -u -r2.18 -r2.19
--- Page.pm	2 Apr 2004 17:19:20 -0000	2.18
+++ Page.pm	8 Apr 2004 19:49:51 -0000	2.19
@@ -1,6 +1,6 @@
 # Vend::Page - Handle Interchange page routing
 # 
-# $Id: Page.pm,v 2.18 2004/04/02 17:19:20 mheins Exp $
+# $Id: Page.pm,v 2.19 2004/04/08 19:49:51 jon Exp $
 #
 # Copyright (C) 2002-2003 Interchange Development Group
 # Copyright (C) 1996-2002 Red Hat, Inc.
@@ -46,7 +46,7 @@
 
 use vars qw/$VERSION/;
 
-$VERSION = substr(q$Revision: 2.18 $, 10);
+$VERSION = substr(q$Revision: 2.19 $, 10);
 
 my $wantref = 1;
 
@@ -76,6 +76,7 @@
 	die ::get_locale_message(412, "Missing special page: %s\n", $name)
 		unless defined $page;
 	$page =~ s#\[subject\]#$subject#ig;
+	$Global::Variable->{MV_SUBJECT} = $subject;
 	$Vend::PageInit = 0;
 	interpolate_html($page, 1);
 	::response();