github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-11-12 11:52:01 +01:00
Code Releases Activity

fix html escaping for UTF-8 module metadata

Browse Source
This commit is contained in:
Brent Cook 2018-02-02 16:35:50 -06:00
parent c9473f8cbc
commit 0a3fe0c608
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
data/markdown_doc/default_template.erb
View File

@ -5,7 +5,7 @@
## Module Name
<%= Rex::Text.html_encode(items[:mod_fullname]) %>
<%= CGI::escapeHTML(items[:mod_fullname]) %>
## Authors
@ -47,4 +47,4 @@ No options required.
## Basic Usage
<%= normalize_demo_output(items[:mod_demo]) %>
<%= normalize_demo_output(items[:mod_demo]) %>

2
lib/msf/util/document_generator/normalizer.rb
View File

@ -183,7 +183,7 @@ module Msf
# @return [String]
def normalize_authors(authors)
if authors.kind_of?(Array)
authors.collect { |a| "* #{Rex::Text.html_encode(a)}" } * "\n"
authors.collect { |a| "* #{CGI::escapeHTML(a)}" } * "\n"
else
authors
end