Auto-untaint variables passed through 'escape' · 1d151885be - liquid - Gitea: Git with a cup of tea

Labyricorn/liquid

mirror of https://github.com/Shopify/liquid.git synced 2026-09-20 03:10:39 -07:00

Auto-untaint variables passed through 'escape'

This commit is contained in:

Evan Huus

2014-09-16 17:23:26 +00:00

parent e836024dd9

commit 1d151885be

1 changed files with 1 additions and 1 deletions

									
										lib/liquid/standardfilters.rb
									
		+1
		-1
	
												View File
												
					@@ -34,7 +34,7 @@ module Liquid

					    end

					    end

					    def escape(input)

					    def escape(input)

					      CGI.escapeHTML(input) rescue input

					      CGI.escapeHTML(input).untaint rescue input

					    end

					    end

					    alias_method :h, :escape

					    alias_method :h, :escape