actions/actions-sync
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

escaping user input

Browse Source 
Signed-off-by: GitHub <noreply@github.com>
This commit is contained in:
Florian Wagner
2022-04-29 04:59:19 +00:00
committed by GitHub
parent 9f2780c5e5
commit c972445c27
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
test/github.go
View File

@@ -4,6 +4,7 @@ import (
"encoding/json"
"flag"
"fmt"
"html"
"io/ioutil"
"net/http"
"path"
@@ -50,7 +51,7 @@ func main() {
if orgReq.Login == authenticatedLogin {
w.WriteHeader(http.StatusUnprocessableEntity)
_, err := w.Write([]byte(fmt.Sprintf("%s is a user, not an organization", orgReq.Login)))
_, err := w.Write([]byte(fmt.Sprintf("%s is a user, not an organization", html.EscapeString(orgReq.Login))))
if err != nil {
panic(err)
}
@@ -58,7 +59,7 @@ func main() {
if orgReq.Login == existingOrg {
w.WriteHeader(http.StatusUnprocessableEntity)
_, err := w.Write([]byte(fmt.Sprintf("Organization %s already exists", orgReq.Login)))
_, err := w.Write([]byte(fmt.Sprintf("Organization %s already exists", html.EscapeString(orgReq.Login))))
if err != nil {
panic(err)
}
@@ -77,7 +78,7 @@ func main() {
if orgName != existingOrg {
w.WriteHeader(http.StatusNotFound)
_, err := w.Write([]byte(fmt.Sprintf("Organization %s not found", orgName)))
_, err := w.Write([]byte(fmt.Sprintf("Organization %s not found", html.EscapeString(orgName))))
if err != nil {
panic(err)
}
@@ -107,7 +108,7 @@ func main() {
if repoReq.Name == "repo-already-exists" {
w.WriteHeader(http.StatusUnprocessableEntity)
_, err := w.Write([]byte(fmt.Sprintf("Repo %s already exists", repoReq.Name)))
_, err := w.Write([]byte(fmt.Sprintf("Repo %s already exists", html.EscapeString(repoReq.Name))))
if err != nil {
panic(err)
}
@@ -137,7 +138,7 @@ func main() {
if repoReq.Name == existingRepo {
w.WriteHeader(http.StatusUnprocessableEntity)
_, err := w.Write([]byte(fmt.Sprintf("Repo %s already exists", repoReq.Name)))
_, err := w.Write([]byte(fmt.Sprintf("Repo %s already exists", html.EscapeString(repoReq.Name))))
if err != nil {
panic(err)
}