evin/secretary
3
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Fix critical issues in regexs used by _unescape_entities function.

Browse source
This commit is contained in:
Christopher Ramírez 2015-05-13 10:27:46 -06:00
parent fc0bdad55c
commit 2896491e79
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
secretary.py
View file

@ -307,11 +307,11 @@ class Renderer(object):
and unescapes HTML codes for >, <, & and "
"""
unescape_rules = {
r'(?is)({([{|%])[^%|}]*?)(</?text:s.*?>)(.*?[%|}]})': r'\1 \4',
r'(?is)({([{|%])[^%|}]*?)(&gt;)(.*?[%|}]})' : r'\1>\4',
r'(?is)({([{|%])[^%|}]*?)(&lt;)(.*?[%|}]})' : r'\1<\4',
r'(?is)({([{|%])[^%|}]*?)(&amp;)(.*?[%|}]})' : r'\1&\4',
r'(?is)({([{|%])[^%|}]*?)(&quot;)(.*?[%|}]})' : r'\1"\4',
r'(?is)({([{%])[^%}]*?)(</?text:s.*?>)(.*?[%}]})': r'\1 \4',
r'(?is)({([{%])[^%}]*?)(&gt;)(.*?[%}]})' : r'\1>\4',
r'(?is)({([{%])[^%}]*?)(&lt;)(.*?[%}]})' : r'\1<\4',
r'(?is)({([{%])[^%}]*?)(&amp;)(.*?[%}]})' : r'\1&\4',
r'(?is)({([{%])[^%}]*?)(&quot;)(.*?[%}]})' : r'\1"\4',
}
for regexp, replacement in unescape_rules.items():