small fix for admindb.py
It seems like admindb.py doesn't escape the body of html emails properly, which can make it impossible to do anything to the post. This patch should fix it. --- mailman/Mailman/Cgi/admindb.py~ Mon Apr 30 17:53:15 2001 +++ mailman/Mailman/Cgi/admindb.py Mon Apr 30 17:56:09 2001 @@ -228,7 +228,7 @@ row, col = t.GetCurrentRowIndex(), t.GetCurrentCellIndex() t.AddCellInfo(row, col-1, align='right') t.AddRow([Bold('Message Excerpt:'), - TextArea('fulltext-%d' % id, text, rows=10, cols=80)]) + TextArea('fulltext-%d' % id, cgi.escape(text), rows=10, cols=80)]) t.AddCellInfo(row+1, col-1, align='right') form.AddItem(t) form.AddItem('<p>') -- Tollef Fog Heen Unix _IS_ user friendly... It's just selective about who its friends are.
participants (1)
-
Tollef Fog Heen