vieter-v
/
v
2
0
Fork 0
Code Issues Pull Requests Releases Activity

vweb: escape form key, not only value. (#6269)

pull/6277/head
florin 2020-08-30 13:09:12 -04:00 committed by GitHub
parent ea31c2a643
commit b1a8e1e5b2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
vlib/vweb/vweb.v
View File

@ -494,7 +494,9 @@ fn (mut ctx Context) parse_form(s string) {
} }
keyval := word.trim_space().split('=') keyval := word.trim_space().split('=')
if keyval.len != 2 { continue } if keyval.len != 2 { continue }
key := keyval[0] key := urllib.query_unescape(keyval[0]) or {
continue
}
val := urllib.query_unescape(keyval[1]) or { val := urllib.query_unescape(keyval[1]) or {
continue continue
} }