Ignore:
Timestamp:
12/05/08 07:28:02 (3 years ago)
Author:
KennethLavrsen
Message:

Item375: Further securing URLPARAM where needed in distributed topics.
More to come

File:
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/core/data/System/FormattedSearch.txt

    r1022 r1180  
    187187<form action="%SCRIPTURLPATH{"view"}%/%WEB%/%TOPIC%"> 
    188188Find Topics:  
    189 <input type="text" name="q" size="32" value="%URLPARAM{"q"}%" />&nbsp;<input type="submit" class="twikiSubmit" value="Search" /> 
     189<input type="text" name="q" size="32" value="%URLPARAM{"q" encode="entity"}%" />&nbsp;<input type="submit" class="twikiSubmit" value="Search" /> 
    190190</form> 
    191191Result: 
    192 %SEARCH{ search="%URLPARAM{"q"}%" format="   * $web.$topic: %BR% $summary" nosearch="on" }% 
     192%SEARCH{ search="%URLPARAM{"q" encode="quote"}%" type="keyword" format="   * $web.$topic: %BR% $summary" nosearch="on" }% 
    193193</verbatim> 
    194194 
    … …  
    197197<form action="%SCRIPTURLPATH{"view"}%/%WEB%/%TOPIC%"> 
    198198Find Topics:  
    199 <input type="text" name="q" size="32" value="%URLPARAM{"q"}%" />&nbsp;<input type="submit" class="twikiSubmit" value="Search" /> 
     199<input type="text" name="q" size="32" value="%URLPARAM{"q" encode="entity"}%" />&nbsp;<input type="submit" class="twikiSubmit" value="Search" /> 
    200200</form> 
    201201Result: 
    202 %SEARCH{ search="%URLPARAM{"q"}%" format="   * $web.$topic: %BR% $summary" nosearch="on" }% 
     202%SEARCH{ search="%URLPARAM{"q" encode="quote"}%" type="keyword" format="   * $web.$topic: %BR% $summary" nosearch="on" }% 
    203203 
    204204__Related Topics:__ UserDocumentationCategory, SearchHelp, [[%SYSTEMWEB%.Macros#VarSEARCH][Macros#VarSEARCH]], SearchPatternCookbook, RegularExpression 
Note: See TracChangeset for help on using the changeset viewer.