boxtec
/
yacy_search_server
mirror of https://github.com/yacy/yacy_search_server
4
1
Fork 0
Code Issues Projects Releases Wiki Activity

This changes eliminate a way to cripple Profile pages on other peers by sending special messages with HTML tags.

Browse Source 
git-svn-id: https://svn.berlios.de/svnroot/repos/yacy/trunk@331 6c8d7289-2bf4-0310-a012-ef5d649a1542
pull/1/head
low012 20 years ago
parent dbd06eace9
commit 24d77b892f
2 changed files with 16 additions and 14 deletions
Show Stats Download Patch File Download Diff File

21
htroot/EditProfile_p.java
Unescape View File

@ -6,7 +6,7 @@
//Frankfurt, Germany, 2004, 2005 //Frankfurt, Germany, 2004, 2005
// //
//This File is contributed by Alexander Schier //This File is contributed by Alexander Schier
//last change: 27.02.2005 //last change: 29.06.2005 by Marc Nause
// //
//This program is free software; you can redistribute it and/or modify //This program is free software; you can redistribute it and/or modify
//it under the terms of the GNU General Public License as published by //it under the terms of the GNU General Public License as published by
@ -54,6 +54,7 @@ import java.util.Properties;
import de.anomic.http.httpHeader; import de.anomic.http.httpHeader;
import de.anomic.server.serverObjects; import de.anomic.server.serverObjects;
import de.anomic.server.serverSwitch; import de.anomic.server.serverSwitch;
import de.anomic.tools.unHtml;
public class EditProfile_p { public class EditProfile_p {
@ -83,17 +84,17 @@ public class EditProfile_p {
profile.setProperty("comment", (String)post.get("comment")); profile.setProperty("comment", (String)post.get("comment"));
} }
prop.put("name", profile.getProperty("name", "")); prop.put("name", (new unHtml(profile.getProperty("name", ""))).un());
prop.put("nickname", profile.getProperty("nickname", "")); prop.put("nickname", (new unHtml(profile.getProperty("nickname", ""))).un());
prop.put("homepage", profile.getProperty("homepage", "")); prop.put("homepage", (new unHtml(profile.getProperty("homepage", ""))).un());
prop.put("email", profile.getProperty("email", "")); prop.put("email", (new unHtml(profile.getProperty("email", ""))).un());
prop.put("icq", profile.getProperty("icq", "")); prop.put("icq", (new unHtml(profile.getProperty("icq", ""))).un());
prop.put("jabber", profile.getProperty("jabber", "")); prop.put("jabber", (new unHtml(profile.getProperty("jabber", ""))).un());
prop.put("yahoo", profile.getProperty("yahoo", "")); prop.put("yahoo", (new unHtml(profile.getProperty("yahoo", ""))).un());
prop.put("msn", profile.getProperty("msn", "")); prop.put("msn", (new unHtml(profile.getProperty("msn", ""))).un());
prop.put("comment", profile.getProperty("comment", "")); prop.put("comment", (new unHtml(profile.getProperty("comment", ""))).un());
FileOutputStream fileOut = null; FileOutputStream fileOut = null;
try{ try{

5
htroot/ViewProfile.java
Unescape View File

@ -6,7 +6,7 @@
// Frankfurt, Germany, 2004, 2005 // Frankfurt, Germany, 2004, 2005
// //
// This File is contributed by Alexander Schier // This File is contributed by Alexander Schier
// last change: 27.02.2005 // last change: 29.06.2005 by Marc Nause
// //
// This program is free software; you can redistribute it and/or modify // This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by // it under the terms of the GNU General Public License as published by
@ -57,6 +57,7 @@ import de.anomic.server.serverSwitch;
import de.anomic.yacy.yacyClient; import de.anomic.yacy.yacyClient;
import de.anomic.yacy.yacyCore; import de.anomic.yacy.yacyCore;
import de.anomic.yacy.yacySeed; import de.anomic.yacy.yacySeed;
import de.anomic.tools.unHtml;
public class ViewProfile { public class ViewProfile {
@ -104,7 +105,7 @@ public class ViewProfile {
while (i.hasNext()) { while (i.hasNext()) {
entry = (Map.Entry) i.next(); entry = (Map.Entry) i.next();
String key=(String)entry.getKey(); String key=(String)entry.getKey();
String value=((String)entry.getValue()).replaceAll("\r","").replaceAll("\\\\n","\n"); String value=(new unHtml(((String)entry.getValue()).replaceAll("\r","").replaceAll("\\\\n","\n"))).un();
//all known Keys which should be set as they are //all known Keys which should be set as they are
if(knownKeys.contains(key)){ if(knownKeys.contains(key)){
prop.put("success_"+key, 1); prop.put("success_"+key, 1);

Write Preview
Loading…
Cancel
Save