3 --- cluster-software/search.cgi.orig 2007-09-21 23:27:39.000000000 +0200
4 +++ cluster-software/search.cgi
5 @@ -29,7 +29,8 @@ if (@match == 1) {
6 &ui_print_header(undef, $text{'search_title'}, "", "search");
8 @match = sort { lc($a->{'name'}) cmp lc($b->{'name'}) } @match;
9 - print "<b>",&text('search_match', "<tt>$s</tt>"),"</b><br>\n";
10 + print "<b>",&text('search_match', "<tt>" . &html_escape($s) . "</tt>"),
13 print &ui_form_start("delete_packs.cgi", "post");
14 print &ui_hidden("search", $in{'search'}),"\n";
15 @@ -43,8 +44,9 @@ if (@match) {
16 $text{'search_desc'} ], 100, 0, \@tds);
19 - push(@cols, "<a href=\"edit_pack.cgi?search=$s&package=".
20 - &urlize($i->{'name'})."\">$i->{'name'}</a>");
21 + push(@cols, "<a href=\"edit_pack.cgi?search=" .
22 + &urlize($s) . "&package=". &urlize($i->{'name'}) .
23 + "\">$i->{'name'}</a>");
25 push(@cols, $i->{'class'} || $text{'search_none'});
26 push(@cols, $i->{'desc'});
27 @@ -62,7 +64,8 @@ if (@match) {
31 - print "<b>",&text('search_nomatch', "<tt>$s</tt>"),"</b>\n";
32 + print "<b>",&text('search_nomatch', "<tt>" . &html_escape($s) .
36 &ui_print_footer("", $text{'index_return'});