[checkmk-commits] Check_MK Git: check_mk: FIX: Escaping html code in plugin output painters

Module: check_mk Branch: master Commit: a590920a1706237078689bca644d21a74a460d7f URL: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=a590920a170623… Author: Lars Michelsen <lm(a)mathias-kettner.de> Date: Thu Oct 24 14:07:09 2013 +0200 FIX: Escaping html code in plugin output painters --- ChangeLog | 1 + web/htdocs/lib.py | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 3424ed6..b34bfca 100644 --- a/ChangeLog +++ b/ChangeLog @@ -604,6 +604,7 @@ * FIX: correctly display sub-minute check/retry intervals * FIX: fix logic of some numeric sorters * FIX: Improved user provided variable validation in view code + * FIX: Escaping html code in plugin output painters WATO: * FIX: fix layout of Auxiliary tags table diff --git a/web/htdocs/lib.py b/web/htdocs/lib.py index ce752f8..0119beb 100644 --- a/web/htdocs/lib.py +++ b/web/htdocs/lib.py @@ -245,7 +245,7 @@ def paint_host_list(site, hosts): return "", h def format_plugin_output(output, row = None): - output = output.replace("(!)", warn_marker) \ + output = html.attrencode(output).replace("(!)", warn_marker) \ .replace("(!!)", crit_marker) \ .replace("(?)", unknown_marker) if row and "[running on" in output: