← Back to branch summary

~ubuntu-branches/ubuntu/trusty/nagios3/trusty

« back to all changes in this revision

Viewing changes to cgi/trends.c

  • Committer: Bazaar Package Importer
  • Author(s): Alexander Wirt, Alexander Wirt, Jan Wagner
  • Date: 2008-06-10 21:26:00 UTC
  • mfrom: (1.1.1 upstream)
  • Revision ID: james.westby@ubuntu.com-20080610212600-xj80y1civrm3clw9
Tags: 3.0.2-1
http://bugs.debian.org/479324
http://bugs.debian.org/478412
http://bugs.debian.org/478877
http://bugs.debian.org/481334
http://bugs.debian.org/479061
http://bugs.debian.org/485439
http://bugs.debian.org/482178
http://bugs.debian.org/479334
http://bugs.debian.org/479329
[ Alexander Wirt ]
* Remove bashism from rules file (Closes: #479324, #478412)
* Set p1.pl DEBUG_LOG_PATH to /var/log/nagios3/ (Closes: #478877)
* Start nagios3 in nagios3.postinst (Closes: #481334)
* Add a patch from Stephane Chazelas which fixes the incluѕion of spurious $
  signs into command output (Closes: #479061)

[ Jan Wagner ]
* New upstream release (Closes: #485439)
  * Fix XSS vulnerability (CVE-2007-5803).
* updated cfg-cgi.cfg.diff, cfg-commands.cfg.diff and cfg-nagios.cfg.diff
  for new upstream release and remove version from config files
  (Closes: #482178)
* Updating standards version to 3.8.0, no changes needed
* add myself fo Uploaders
* add doc-base support (Closes: #479334)
* replace dependency of mailx with bsd-mailx
* added Vcs- fields into source header's field
* take care if killproc isn't able to stop daemon via stop target of
  initscript, thanks Stephen Gran <sgran@debian.org> for providing this fix
  (Closes: #479329)

Show diffs side-by-side

added added

removed removed

Lines of Context:
cgi/trends.c
454
454
                                printf("<input type='hidden' name='nomap' value=''>\n");
455
455
                        printf("<input type='hidden' name='t1' value='%lu'>\n",(unsigned long)t1);
456
456
                        printf("<input type='hidden' name='t2' value='%lu'>\n",(unsigned long)t2);
457
 
                        printf("<input type='hidden' name='host' value='%s'>\n",host_name);
 
457
                        printf("<input type='hidden' name='host' value='%s'>\n",url_encode(host_name));
458
458
                        if(display_type==DISPLAY_SERVICE_TRENDS)
459
 
                                printf("<input type='hidden' name='service' value='%s'>\n",svc_description);
 
459
                                printf("<input type='hidden' name='service' value='%s'>\n",url_encode(svc_description));
460
460
 
461
461
                        printf("<input type='hidden' name='assumeinitialstates' value='%s'>\n",(assume_initial_states==TRUE)?"yes":"no");
462
462
                        printf("<input type='hidden' name='assumestateretention' value='%s'>\n",(assume_state_retention==TRUE)?"yes":"no");
901
901
 
902
902
                        printf("<TABLE BORDER=0 CELLPADDING=5>\n");
903
903
                        printf("<form method=\"GET\" action=\"%s\">\n",TRENDS_CGI);
904
 
                        printf("<input type='hidden' name='host' value='%s'>\n",host_name);
 
904
                        printf("<input type='hidden' name='host' value='%s'>\n",url_encode(host_name));
905
905
                        if(display_type==DISPLAY_SERVICE_TRENDS)
906
 
                                printf("<input type='hidden' name='service' value='%s'>\n",svc_description);
 
906
                                printf("<input type='hidden' name='service' value='%s'>\n",url_encode(svc_description));
907
907
 
908
908
                        printf("<tr><td class='reportSelectSubTitle' align=right>Report period:</td>\n");
909
909
                        printf("<td class='reportSelectItem'>\n");