@@ -31,6 +31,10 @@ class Page
@raw_body ||= File.exists?(@filename) ? File.read(@filename) : ''
end
end
+
+ def escaped_raw_body
+ self.raw_body.gsub(/[<,>]/) { |matched| (matched == '<' ? '<' : '>') }
+ end
def update(content, message=nil)
File.open(@filename, 'w') { |f| f << content }
@@ -174,5 +178,4 @@ class Page
end.sub(/([0-9])\.?0+ /, '\1 ' )
end
end
-
end
\ No newline at end of file
page.rb
@@ -32,7 +32,7 @@
<div class="content">
<form method="post" action="/e/<%= @page.name %>">
- <textarea name="body" id="edit_textarea"><%= @page.raw_body %></textarea>
+ <textarea name="body" id="edit_textarea"><%= @page.escaped_raw_body %></textarea>
Message:
<textarea name="message" rows="4" id="message_textarea"></textarea>
<p class="right"><input type="submit" value="Save" class="submit" /></p>
views/edit.erb
8cdece415247824a970be3d368891b7724293bab
Simone Dall'Angelo
simone@wonsys.net
http://github.com/jnewland/git-wiki/commit/6dd97d2b0cdf0892d963af7a589d3dfc324e0b73
6dd97d2b0cdf0892d963af7a589d3dfc324e0b73
2008-06-28T05:18:46-07:00
2008-06-28T05:18:46-07:00
Added substitution for '<' and '>' to fix edit page if there is a '</textarea>' in the text.
5889ad5ea27ab250ca1bc6687dcb83be76da1b1a
Simone Dall'Angelo
simone@wonsys.net