use custom escape function

This commit is contained in:
dreamer 2026-04-14 08:24:34 +02:00
parent fe70315a63
commit 49cc36ef31
3 changed files with 13 additions and 6 deletions

View File

@ -1,6 +1,4 @@
local to_json = require("lapis.util").to_json
local autoload = require("lapis.util").autoload local autoload = require("lapis.util").autoload
local escape = require("lapis.util").escape
local config = require("lapis.config") local config = require("lapis.config")
local hotmixes = autoload("hotmixes") local hotmixes = autoload("hotmixes")
@ -18,7 +16,7 @@ local function Roothandler(self)
self.images = stuff.images self.images = stuff.images
self.latestpath = latest_path self.latestpath = latest_path
self.latestname = latest_name self.latestname = latest_name
self.functions = { escape = escape } self.functions = { hotesc = hotmixes.utils.hotesc }
if self.titles['url'] == "panamaracing.club" then if self.titles['url'] == "panamaracing.club" then
return { render = "root", layout = require "views.prc_layout" } return { render = "root", layout = require "views.prc_layout" }

View File

@ -30,6 +30,10 @@ local type_allowed = { jpg=true, jpeg=true, png=true, gif=true, mp3=true, flac=t
local utils = {} local utils = {}
local function hotesc ( str )
return escape(str):gsub("%%2f", "/"):gsub("%%2d", "-"):gsub("%%2e", ".")
end
utils['request_path'] = request_path utils['request_path'] = request_path
utils['data_path'] = data_path utils['data_path'] = data_path
@ -84,12 +88,17 @@ utils['these_files'] = function( path )
return stuff return stuff
end end
utils['hotesc'] = function( str )
return hotesc(str)
end
utils['these_latest'] = function( path ) utils['these_latest'] = function( path )
-- list last 10 modified files in our directory -- list last 10 modified files in our directory
local latest_path, latest_name = {}, {} local latest_path, latest_name = {}, {}
for i, file_path in ipairs( utils.latest_files( path ) ) do for i, file_path in ipairs( utils.latest_files( path ) ) do
table.insert( latest_path, escape(file_path)) local escpath = hotesc(file_path)
table.insert( latest_path, escpath )
local temp = "" local temp = ""
local result = "" local result = ""

View File

@ -10,13 +10,13 @@
<% for i, dir in ipairs(dirs) do %> <% for i, dir in ipairs(dirs) do %>
<br> <br>
<a href="<%- functions.escape(uri .. dir):gsub("%%2f", "/"):gsub("%%2d", "-"):gsub("%%2e", ".") %>" class="djsection"><span><%= dir %></span></a> <a href="<%- functions.hotesc(uri .. dir) %>" class="djsection"><span><%= dir %></span></a>
<br> <br>
<% end %> <% end %>
<br> <br>
<% for i, file in ipairs(files) do %> <% for i, file in ipairs(files) do %>
<a class="amixlink" href="<%- functions.escape(path .. file):gsub("%%2d", "-"):gsub("%%2f", "/"):gsub("%%2e", ".") %>"> <a class="amixlink" href="<%- functions.hotesc(path .. file) %>">
<span class="mixlink"><%= file %></span> <span class="mixlink"><%= file %></span>
</a> </a>
<br> <br>