Escape HTML tags in self-signed certs

This commit is contained in:
Daniel Molkentin 2012-10-24 12:44:48 +02:00
parent a315a3b5c7
commit 28e15f5420

View file

@ -140,9 +140,9 @@ QString SslErrorDialog::certDiv( QSslCertificate cert ) const
msg += QL("<div id=\"ccert\">"); msg += QL("<div id=\"ccert\">");
QStringList li; QStringList li;
QString org = cert.subjectInfo( QSslCertificate::Organization); QString org = Qt::escape(cert.subjectInfo( QSslCertificate::Organization));
QString unit = cert.subjectInfo( QSslCertificate::OrganizationalUnitName); QString unit = Qt::escape(cert.subjectInfo( QSslCertificate::OrganizationalUnitName));
QString country = cert.subjectInfo( QSslCertificate::CountryName); QString country = Qt::escape(cert.subjectInfo( QSslCertificate::CountryName));
if (unit.isEmpty()) unit = tr("&lt;not specified&gt;"); if (unit.isEmpty()) unit = tr("&lt;not specified&gt;");
if (org.isEmpty()) org = tr("&lt;not specified&gt;"); if (org.isEmpty()) org = tr("&lt;not specified&gt;");
if (country.isEmpty()) country = tr("&lt;not specified&gt;"); if (country.isEmpty()) country = tr("&lt;not specified&gt;");
@ -163,12 +163,12 @@ QString SslErrorDialog::certDiv( QSslCertificate cert ) const
msg += QL("</div>" ); msg += QL("</div>" );
msg += QL("<h3>") + tr("Issuer: %1").arg( cert.issuerInfo( QSslCertificate::CommonName )) + QL("</h3>"); msg += QL("<h3>") + tr("Issuer: %1").arg(Qt::escape(cert.issuerInfo( QSslCertificate::CommonName))) + QL("</h3>");
msg += QL("<div id=\"issuer\">"); msg += QL("<div id=\"issuer\">");
li.clear(); li.clear();
li << tr("Organization: %1").arg( cert.issuerInfo( QSslCertificate::Organization) ); li << tr("Organization: %1").arg(Qt::escape(cert.issuerInfo( QSslCertificate::Organization)));
li << tr("Unit: %1").arg( cert.issuerInfo( QSslCertificate::OrganizationalUnitName) ); li << tr("Unit: %1").arg(Qt::escape(cert.issuerInfo( QSslCertificate::OrganizationalUnitName)));
li << tr("Country: %1").arg(cert.issuerInfo( QSslCertificate::CountryName)); li << tr("Country: %1").arg(Qt::escape(cert.issuerInfo( QSslCertificate::CountryName)));
msg += QL("<p>") + li.join(QL("<br/>")) + QL("</p>"); msg += QL("<p>") + li.join(QL("<br/>")) + QL("</p>");
msg += QL("</div>" ); msg += QL("</div>" );
msg += QL("</div>" ); msg += QL("</div>" );