GitHub/Anki
1
0
Fork 0
mirror of https://github.com/ankitects/anki.git synced 2025-09-21 15:32:23 -04:00
Code Issues Projects Releases Packages 1 Wiki Activity Actions

make sure we escape html chars after type ans comp. (#960)

Browse source
This commit is contained in:
Damien Elmes 2013-09-20 14:57:05 +09:00
parent 7eabc36468
commit fe3ce87020
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
aqt/reviewer.py
View file

@ -472,11 +472,11 @@ Please run Tools>Empty Cards""")
"Diff-corrects the typed-in answer."
givenElems, correctElems = self.tokenizeComparison(given, correct)
def good(s):
return "<span class=typeGood>"+s+"</span>"
return "<span class=typeGood>"+cgi.escape(s)+"</span>"
def bad(s):
return "<span class=typeBad>"+s+"</span>"
return "<span class=typeBad>"+cgi.escape(s)+"</span>"
def missed(s):
return "<span class=typeMissed>"+s+"</span>"
return "<span class=typeMissed>"+cgi.escape(s)+"</span>"
if given == correct:
res = good(given)
else: