[TWiki-Dev] [SVN] PeterThoeny r17834 - twiki/trunk/core/templates

[<de...@de...>]

Author: PeterThoeny
Date: 2009-02-22 20:53:34 -0600 (Sun, 22 Feb 2009)
New Revision: 17834
Trac url: http://develop.twiki.org/trac/changeset/17834

Modified:
   twiki/trunk/core/templates/viewtopicactionbuttons.tmpl
Log:
Item6186: Fix for XSS issue in QUERYPARAMS (thanks MarcSchoenefeld and SteveMilner of Red Hat)

Modified: twiki/trunk/core/templates/viewtopicactionbuttons.tmpl
===================================================================
--- twiki/trunk/core/templates/viewtopicactionbuttons.tmpl	2009-02-20 14:23:41 UTC (rev 17833)
+++ twiki/trunk/core/templates/viewtopicactionbuttons.tmpl	2009-02-23 02:53:34 UTC (rev 17834)
@@ -18,7 +18,7 @@
 
 %TMPL:DEF{"action_printable"}%%TMPL:P{"printable"}%%TMPL:P{"sep"}%%TMPL:END%
 
-%TMPL:DEF{"printable"}%<span><a href='%SCRIPTURLPATH{"view"}%/%WEB%/%TOPIC%?cover=print%QUERYPARAMSTRING%%REVARG%' rel='nofollow' %MAKETEXT{"title='Printable version of this topic' accesskey='p'>&Print version"}%</a></span>%TMPL:END%
+%TMPL:DEF{"printable"}%<span><a href='%SCRIPTURLPATH{"view"}%/%WEB%/%TOPIC%?cover=print%QUERYPARAMSTRING{ encoding="url" }%%REVARG%' rel='nofollow' %MAKETEXT{"title='Printable version of this topic' accesskey='p'>&Print version"}%</a></span>%TMPL:END%
 
 %TMPL:DEF{"activatable_printable"}%%TMPL:P{"printable"}%%TMPL:END%
 
@@ -107,4 +107,4 @@
 
 %TMPL:DEF{"action_revisions"}%%TMPL:P{"revisions"}%%TMPL:P{"sep"}%%TMPL:END%
 
-%TMPL:DEF{"revisions"}%<span>%TMPL:P{context="HistoryPluginEnabled" then="history_history" else="history_rdiff"}%: %TMPL:P{context="CompareRevisionsAddonPluginEnabled" then="revisions_compare" else="revisions_rdiff"}%</span>%TMPL:END%
\ No newline at end of file
+%TMPL:DEF{"revisions"}%<span>%TMPL:P{context="HistoryPluginEnabled" then="history_history" else="history_rdiff"}%: %TMPL:P{context="CompareRevisionsAddonPluginEnabled" then="revisions_compare" else="revisions_rdiff"}%</span>%TMPL:END%