Projekt

Allgemein

Profil

« Zurück | Weiter » 

Revision 5cf977e5

Von Moritz Bunkus vor etwa 17 Jahren hinzugefügt

  • ID 5cf977e52788c523150fa19225b90914e6ddc909
  • Vorgänger ee3ab257
  • Nachfolger d7def35a

Quoten von allen in regulären Ausdrücken verwendeten Variablen, die direkt oder indirekt von Benutzereingaben stammen können. Fix für Bug 302.

Unterschiede anzeigen:

bin/mozilla/am.pl
1688 1688

  
1689 1689
  if ($form->{id}) {
1690 1690
    $form->{selectIC} =~ s/selected//g;
1691
    $form->{selectIC} =~ s/ value=$form->{inventory_accno_id}/  value=$form->{inventory_accno_id} selected/;
1691
    $form->{selectIC} =~ s/ value=\Q$form->{inventory_accno_id}\E/  value=$form->{inventory_accno_id} selected/;
1692 1692
    $form->{selectIC_income} =~ s/selected//g;
1693
    $form->{selectIC_income} =~ s/ value=$form->{income_accno_id_0}/  value=$form->{income_accno_id_0} selected/;
1693
    $form->{selectIC_income} =~ s/ value=\Q$form->{income_accno_id_0}\E/  value=$form->{income_accno_id_0} selected/;
1694 1694
    $form->{selectIC_expense} =~ s/selected//g;
1695
    $form->{selectIC_expense} =~ s/ value=$form->{expense_accno_id_0}/  value=$form->{expense_accno_id_0} selected/;
1695
    $form->{selectIC_expense} =~ s/ value=\Q$form->{expense_accno_id_0}\E/  value=$form->{expense_accno_id_0} selected/;
1696 1696
  }
1697 1697

  
1698 1698
  if (!$eur) {
......
1719 1719
	      </tr>|;
1720 1720
  if ($form->{id}) {
1721 1721
    $form->{selectIC_income} =~ s/selected//g;
1722
    $form->{selectIC_income} =~ s/ value=$form->{income_accno_id_1}/  value=$form->{income_accno_id_1} selected/;
1722
    $form->{selectIC_income} =~ s/ value=\Q$form->{income_accno_id_1}\E/  value=$form->{income_accno_id_1} selected/;
1723 1723
    $form->{selectIC_expense} =~ s/selected//g;
1724
    $form->{selectIC_expense} =~ s/ value=$form->{expense_accno_id_1}/  value=$form->{expense_accno_id_1} selected/;
1724
    $form->{selectIC_expense} =~ s/ value=\Q$form->{expense_accno_id_1}\E/  value=$form->{expense_accno_id_1} selected/;
1725 1725
  }
1726 1726
  $linkaccounts .= qq|	      <tr>
1727 1727
		<th align=right>| . $locale->text('Revenues EU with UStId') . qq|</th>
......
1734 1734

  
1735 1735
  if ($form->{id}) {
1736 1736
    $form->{selectIC_income} =~ s/selected//g;
1737
    $form->{selectIC_income} =~ s/ value=$form->{income_accno_id_2}/  value=$form->{income_accno_id_2} selected/;
1737
    $form->{selectIC_income} =~ s/ value=\Q$form->{income_accno_id_2}\E/  value=$form->{income_accno_id_2} selected/;
1738 1738
    $form->{selectIC_expense} =~ s/selected//g;
1739
    $form->{selectIC_expense} =~ s/ value=$form->{expense_accno_id_2}/  value=$form->{expense_accno_id_2} selected/;
1739
    $form->{selectIC_expense} =~ s/ value=\Q$form->{expense_accno_id_2}\E/  value=$form->{expense_accno_id_2} selected/;
1740 1740
  }
1741 1741

  
1742 1742
  $linkaccounts .= qq|	      <tr>
......
1750 1750

  
1751 1751
  if ($form->{id}) {
1752 1752
    $form->{selectIC_income} =~ s/selected//g;
1753
    $form->{selectIC_income} =~ s/ value=$form->{income_accno_id_3}/  value=$form->{income_accno_id_3} selected/;
1753
    $form->{selectIC_income} =~ s/ value=\Q$form->{income_accno_id_3}\E/  value=$form->{income_accno_id_3} selected/;
1754 1754
    $form->{selectIC_expense} =~ s/selected//g;
1755
    $form->{selectIC_expense} =~ s/ value=$form->{expense_accno_id_3}/  value=$form->{expense_accno_id_3} selected/;
1755
    $form->{selectIC_expense} =~ s/ value=\Q$form->{expense_accno_id_3}\E/  value=$form->{expense_accno_id_3} selected/;
1756 1756
  }
1757 1757

  
1758 1758
  $linkaccounts .= qq|	      <tr>

Auch abrufbar als: Unified diff