XSS Fix

[goehle]

A fix for a potential XSS attack. Scrubs some potential badness before problem is even saved and also tries to escape more printed html.

[mgage]

this doesn't belong here I think. It only needs to be included once in the file, not everytime the file
is called. It can go at the top of the file.

[goehle]

I wasn't sure where to put packages where they would be usable within
PGAnswerMacro .... Feel free to move it
On Jun 2, 2013 10:41 PM, "Michael Gage" notifications@github.com wrote:

In macros/PGbasicmacros.pl:

@@ -29,7 +29,10 @@ =head1 DESCRIPTION

=cut

-# this is equivalent to use strict, but can be used within the Safe compartment.
+#sub _PGbasicmacros_init {use HTML::Entities::encode_entities;}

this doesn't belong here I think. It only needs to be included once in the
file, not everytime the file
is called. It can go at the top of the file.

—
Reply to this email directly or view it on GitHubhttps://github.com//pull/17/files#r4493451
.