Fix XSS in openid selector. Thanks, Raghav Bisht.

[git.ikiwiki.info.git] / ikiwiki.in

diff --git a/ikiwiki.in b/ikiwiki.in
index 339efd37c3ab8655746bff66c4610924936a4c87..e6b64f43949aba391a411c31b1cf57a0c8b56c2e 100755 (executable)
--- a/ikiwiki.in
+++ b/ikiwiki.in
@@ -108,11 +108,9 @@ sub getconfig () {
                                if (! defined $var || ! defined $val) {
                                        die gettext("usage: --set-yaml var=value"), "\n";
                                }
-                               eval q{use YAML::Any};
-                               eval q{use YAML} if $@;
+                               eval q{use YAML::XS; use Encode};
                                die $@ if $@;
-                               eval q{$YAML::Syck::ImplicitUnicode=1};
-                               $config{$var}=Load($val."\n");
+                               $config{$var}=Load(encode_utf8($val)."\n");
                        },
                        "version" => sub {
                                print "ikiwiki version $IkiWiki::version\n";
@@ -180,6 +178,7 @@ sub main () {
                $config{srcdir}="" if ! defined $config{srcdir};
                $config{destdir}="" if ! defined $config{destdir};
                $config{syslog}=1 if $config{setupsyslog};
+               checkconfig();
                require IkiWiki::Setup;
                IkiWiki::Setup::dump($config{dumpsetup});
        }