Temporally bandaid to avoid using %ENV variables literally.

TODO:
  o Clean-up CGI files from scratch. :-)
This commit is contained in:
Jun Kuriyama 2002-04-17 05:03:38 +00:00
parent 1e3cb8ae47
commit 74fc306920
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/www/; revision=12817
2 changed files with 15 additions and 10 deletions

View file

@ -52,9 +52,12 @@
#
# _________________________________________________________________
#
# $FreeBSD: www/en/cgi/missing_handler.cgi,v 1.9 2000/12/28 13:32:15 wosch Exp $
# $FreeBSD: www/en/cgi/missing_handler.cgi,v 1.10 2001/01/01 19:46:55 wosch Exp $
# ----------------------------------------------------------------------
sub escape($) { s/&/&amp;/g; s/</&lt;/g; s/>/&gt;/g; $_; }
sub escape2($) { s/</&lt;/g; s/>/&gt;/g; $_; }
# output title
$title = $ENV{'MISSING_HANDLER_TITLE'} ||
'FreeBSD.org - Document not found';
@ -64,16 +67,16 @@ $footer = $ENV{'MISSING_HANDLER_FOOT'} || '';
# Server environment variables
$http_referer=$ENV{'HTTP_REFERER'};
$redirect_url=$ENV{'REDIRECT_URL'};
$server_admin=$ENV{'SERVER_ADMIN'};
$http_host=$ENV{'HTTP_HOST'};
$server_name=$ENV{'SERVER_NAME'};
$http_referer=escape($ENV{'HTTP_REFERER'});
$redirect_url=escape($ENV{'REDIRECT_URL'});
$server_admin=escape($ENV{'SERVER_ADMIN'});
$http_host=escape($ENV{'HTTP_HOST'});
$server_name=escape($ENV{'SERVER_NAME'});
# rfc1738 says that ";"|"/"|"?"|":"|"@"|"&"|"=" may be reserved.
$http_referer_url = $http_referer;
$http_referer_url = escape2($ENV{'HTTP_REFERER'});
$http_referer_url =~ s/([^a-zA-Z0-9;\/?:&=])/sprintf("%%%02x",ord($1))/eg;
$redirect_url_save = $redirect_url;
$redirect_url_save = escape2($ENV{'REDIRECT_URL'});
$redirect_url_save =~ s/([^a-zA-Z0-9;\/?:&=])/sprintf("%%%02x",ord($1))/eg;

View file

@ -26,7 +26,9 @@
# pds.cgi - FreeBSD Ports download sources cgi script
# print a list of source files for a port
#
# $FreeBSD: www/en/cgi/pds.cgi,v 1.6 2000/01/05 15:47:45 phantom Exp $
# $FreeBSD: www/en/cgi/pds.cgi,v 1.7 2000/12/28 13:12:50 wosch Exp $
sub escape($) { s/&/&amp;/g; s/</&lt;/g; s/>/&gt;/g; $_; }
$hsty_base = '';
$hsty_email = 'ports@FreeBSD.org';
@ -34,7 +36,7 @@ $hsty_email = 'ports@FreeBSD.org';
require "./cgi-lib.pl";
require "./cgi-style.pl";
$file = $ENV{'QUERY_STRING'};
$file = escape($ENV{'QUERY_STRING'});
$file_rcs = "$file/Makefile,v";
$cvsroot = "/home/ncvs";