From 2880fee4e3f80f8748b6a69f1a72aa3a3a5fa922 Mon Sep 17 00:00:00 2001 From: Aldo Cortesi Date: Mon, 23 Jul 2012 16:39:25 +1200 Subject: Escape unprintable content in preview. --- libpathod/app.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'libpathod/app.py') diff --git a/libpathod/app.py b/libpathod/app.py index b8e1ccdd..c94e61ca 100644 --- a/libpathod/app.py +++ b/libpathod/app.py @@ -1,6 +1,6 @@ import logging, pprint, cStringIO from flask import Flask, jsonify, render_template, request, abort -import version, rparse +import version, rparse, utils logging.basicConfig(level="DEBUG") app = Flask(__name__) @@ -83,5 +83,5 @@ def preview(): s = cStringIO.StringIO() r.serve(s, check=app.config["pathod"].check_size) - args["output"] = s.getvalue() + args["output"] = utils.escape_unprintables(s.getvalue()) return render_template("preview.html", **args) -- cgit v1.2.3