kitoy/pywallter
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity

Escape blog article

Browse Source
This commit is contained in:
kitoy
2026-02-26 02:52:06 +01:00
parent 7ff1f6a2aa
commit 7c89dbcd4f
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
views/blog.py
View File

@@ -31,10 +31,10 @@ DESC_SERVER = app.config.get('DESC_SERVER')
def new_article(): def new_article():
user = '%s'% escape(session['username']) user = '%s'% escape(session['username'])
if request.method == 'POST': if request.method == 'POST':
title = str(request.form['title']) title = escape(request.form['title'])
subtitle = str(request.form['subtitle']) subtitle = escape(request.form['subtitle'])
category = str(request.form['category']) category = escape(request.form['category'])
content = str(request.form['content']) content = escape(request.form['content'])
status = str(request.form['status']) status = str(request.form['status'])
post_date = time.strftime("%d/%m/%Y %H:%M:%S") post_date = time.strftime("%d/%m/%Y %H:%M:%S")
if 'blog-unified' in request.form.keys(): if 'blog-unified' in request.form.keys():