webmcp
view framework/env/encode/file_path_element.lua @ 4:5e32ef998acf
Version 1.0.4
ui.link{...} with POST target can now be parameterized with BOTH content and text to allow HTML content for JavaScript browsers and a text-only version for accessiblity
Changes related to database selectors:
- Support for row-based locking
- New method :count(), caching and returning the number of rows, which WOULD have been returned by :exec()
- Bugfix: WHERE and HAVING expressions are now enclosed in parenthesis to avoid problems with operator precedence
ui.script{...} now supports external .js files
Changes in langtool.lua to cope with escaped new-line chars (\n)
ui.link{...} with POST target can now be parameterized with BOTH content and text to allow HTML content for JavaScript browsers and a text-only version for accessiblity
Changes related to database selectors:
- Support for row-based locking
- New method :count(), caching and returning the number of rows, which WOULD have been returned by :exec()
- Bugfix: WHERE and HAVING expressions are now enclosed in parenthesis to avoid problems with operator precedence
ui.script{...} now supports external .js files
Changes in langtool.lua to cope with escaped new-line chars (\n)
| author | jbe/bsw |
|---|---|
| date | Fri Dec 25 12:00:00 2009 +0100 (2009-12-25) |
| parents | 9fdfb27f8e67 |
| children |
line source
1 --[[--
2 encoded_path_element = -- string which can't contain evil stuff like "/"
3 encode.file_path_element(
4 path_element -- string to be encoded
5 )
7 This function is encoding a string in a way that it can be used as a file or directory name, without security risks. See the source for details.
9 --]]--
11 function encode.file_path_element(path_element)
12 return (
13 string.gsub(
14 string.gsub(
15 path_element, "[^0-9A-Za-z_%.-]",
16 function(char)
17 return string.format("%%%02x", string.byte(char))
18 end
19 ), "^%.", string.format("%%%%%02x", string.byte("."))
20 )
21 )
22 end