Author: Lars Hjemli <hjemli@gmail.com>
html.c: add html_url_arg This function can be used to properly escape querystring parameter values. Signed-off-by: Lars Hjemli <hjemli@gmail.com>
html.c | 16 ++++++++++++++++ html.h | 1 +
diff --git a/html.c b/html.c index 36e9a2faf22c49580f5660493320b370b2d654b9..167127f31dd0d2f35c2dcd8e470df21f216f7e08 100644 --- a/html.c +++ b/html.c @@ -128,6 +128,22 @@ if (t!=txt) html(txt); } +void html_url_arg(char *txt) +{ + char *t = txt; + while(t && *t){ + int c = *t; + if (c=='"' || c=='#' || c=='%' || c=='&' || c=='\'' || c=='+' || c=='?') { + write(htmlfd, txt, t - txt); + write(htmlfd, fmt("%%%2x", c), 3); + txt = t+1; + } + t++; + } + if (t!=txt) + html(txt); +} + void html_hidden(char *name, char *value) { html("<input type='hidden' name='"); diff --git a/html.h b/html.h index 3c3293557abd8e95f756eaebd7e2fd5f66704f34..038cf60ef098856c30ca4433e2e82970f34c73c2 100644 --- a/html.h +++ b/html.h @@ -10,6 +10,7 @@ extern void html_status(int code, const char *msg, int more_headers); extern void html_txt(char *txt); extern void html_ntxt(int len, char *txt); extern void html_attr(char *txt); +extern void html_url_arg(char *txt); extern void html_hidden(char *name, char *value); extern void html_option(char *value, char *text, char *selected_value); extern void html_link_open(char *url, char *title, char *class);