smcvpostcomment: remove HTML if not allowed

master
Simon McVittie 2008-11-17 09:10:06 +00:00
parent 660a4ef151
commit 1bd1b03766
1 changed files with 6 additions and 0 deletions

View File

@ -205,6 +205,12 @@ sub sessioncgi ($$) { #{{{
unless $config{prefix_directives};
}
unless ($allow_html) {
$body =~ s/&(\w|#)/&$1/g;
$body =~ s/</&lt;/g;
$body =~ s/>/&gt;/g;
}
# In this template, the [[!meta]] directives should stay at the end,
# so that they will override anything the user specifies. (For
# instance, [[!meta author="I can fake the author"]]...)