mirrors/github.com_openSUSE_osc
1
0
Fork 0
mirror of https://github.com/openSUSE/osc.git synced 2025-11-03 21:08:53 +01:00
Code Activity

Replace arbitrary XML escaping code with xml_escape()

Browse Source
This commit is contained in:
Daniel Mach
2023-03-03 13:20:54 +01:00
parent bacaa29a78
commit e4723f7f74
3 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
osc/commandline.py
View File

@@ -1450,9 +1450,8 @@ class Osc(cmdln.Cmdln):
raise oscerr.WrongOptions('no attribute given to create')
values = ''
if opts.set:
opts.set = opts.set.replace('&', '&amp;').replace('<', '&lt;').replace('>', '&gt;')
for i in opts.set.split(','):
values += '<value>%s</value>' % i
values += '<value>%s</value>' % _private.api.xml_escape(i)
aname = opts.attribute.split(":")
if len(aname) != 2:
raise oscerr.WrongOptions('Given attribute is not in "NAMESPACE:NAME" style')