From a8d7a99979ed1a92fdf63ee7b251c17e41c0acb0 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Wed, 15 Jan 2014 15:53:51 -0400 Subject: [PATCH] osm: Escape name parameter. Closes: #731797 --- IkiWiki/Plugin/osm.pm | 1 + debian/changelog | 1 + 2 files changed, 2 insertions(+) diff --git a/IkiWiki/Plugin/osm.pm b/IkiWiki/Plugin/osm.pm index b8255bb13..472e26945 100644 --- a/IkiWiki/Plugin/osm.pm +++ b/IkiWiki/Plugin/osm.pm @@ -589,6 +589,7 @@ sub map_setup_code($;@) { } $options{'layers'} = $config{osm_layers}; + $name=~s/'//g; # $name comes from user input return "mapsetup('mapdiv-$name', " . to_json(\%options) . ");"; } diff --git a/debian/changelog b/debian/changelog index 7eeec77f9..64427e34f 100644 --- a/debian/changelog +++ b/debian/changelog @@ -2,6 +2,7 @@ ikiwiki (3.20140103) UNRELEASED; urgency=medium * inline: Allow overriding the title of the feed. Closes: #735123 Thanks, Christophe Rhodes + * osm: Escape name parameter. Closes: #731797 -- Joey Hess Mon, 13 Jan 2014 17:06:01 -0400 -- 2.39.2