Bug 347105 - [p=reed r=timeless]

webtools/despot/despot.cgi

@@ -770,7 +770,7 @@ sub FindPartition {
             exit;
         }
         PrintHeader();
-        print h1("Searching for partitions matching $file ...");
+        print h1("Searching for partitions matching " . html_quote($file) . " ...");
         foreach my $match (@matches) {
             if (param("view")) {
                 # This should display modules just as they are displayed
@@ -790,7 +790,7 @@ sub FindPartition {
     }
     else {
         PrintHeader();
-        print h1("Searching for partitions matching $file ...");
+        print h1("Searching for partitions matching " . html_quote($file) . " ...");
         print "No partitions found.";
     }
 

webtools/despot/utils.pl

@@ -58,5 +58,21 @@ sub name_to_id_token {
     return $_;
 }
 
-1;
+# Quotify a string, suitable for output as an html document
+sub html_quote {
+    my ($var) = (@_);
+    $var =~ s/\&/\&/g;
+    $var =~ s/</\&lt;/g;
+    $var =~ s/>/\&gt;/g;
+    return $var;
+}
 
+# Quotify a string, suitable for invoking a shell process
+sub shell_escape {
+    my ($file) = @_;
+    $file =~ s/\000/_NULL_/g;
+    $file =~ s/([ \"\'\`\~\^\?\$\&\|\!<>\(\)\[\]\;\:])/\\$1/g;
+    return $file;
+}
+
+1;