feature #4162: Sanitize some user attributes in XML douments

This commit is contained in:
Ruben S. Montero committed 2016-03-03 12:32:36 +01:00
1 parent 0579f23cf7
commit 6004270685
12 files changed
+81 -77

No files matched your search

+3 -3
View File
@@ -526,9 +526,9 @@ string& PoolObjectSQL::lock_db_to_xml(string& xml) const
int locked_int = locked ? 1 : 0;
oss << "<LOCK>"
<< "<LOCKED>" << locked_int << "</LOCKED>"
<< "<OWNER><![CDATA[" << lock_owner << "]]></OWNER>"
<< "<EXPIRES>" << lock_expires << "</EXPIRES>"
<< "<LOCKED>" << locked_int << "</LOCKED>"
<< "<OWNER>" << one_util::escape_xml(lock_owner) << "</OWNER>"
<< "<EXPIRES>" << lock_expires << "</EXPIRES>"
<< "</LOCK>";
xml = oss.str();