yelp r3172 - in branches/webkit: src stylesheets

[dscorgie svn gnome org]

Author: dscorgie
Date: Tue Aug 12 19:03:23 2008
New Revision: 3172
URL: http://svn.gnome.org/viewvc/yelp?rev=3172&view=rev

Log:
* Fix stupid sting handling vulnerability
* Improve chunking algorithm in XSL


Modified:
   branches/webkit/src/yelp-window.c
   branches/webkit/stylesheets/db2html.xsl.in

Modified: branches/webkit/src/yelp-window.c
==============================================================================
--- branches/webkit/src/yelp-window.c	(original)
+++ branches/webkit/src/yelp-window.c	Tue Aug 12 19:03:23 2008
@@ -1140,9 +1140,9 @@
 	 GTK_DIALOG_MODAL | GTK_DIALOG_DESTROY_WITH_PARENT,
 	 GTK_MESSAGE_ERROR,
 	 GTK_BUTTONS_OK,
-	 title);
+	 "%s", title);
     gtk_message_dialog_format_secondary_markup
-	(GTK_MESSAGE_DIALOG (dialog), message);
+	(GTK_MESSAGE_DIALOG (dialog), "%s", message);
 	 gtk_dialog_run (GTK_DIALOG (dialog));
 
     gtk_widget_destroy (dialog);

Modified: branches/webkit/stylesheets/db2html.xsl.in
==============================================================================
--- branches/webkit/stylesheets/db2html.xsl.in	(original)
+++ branches/webkit/stylesheets/db2html.xsl.in	Tue Aug 12 19:03:23 2008
@@ -71,9 +71,8 @@
   <xsl:param name="depth_in_chunk">
     <xsl:call-template name="db.chunk.depth-in-chunk"/>
   </xsl:param>
-
   <xsl:choose>
-    <xsl:when test="$depth_in_chunk >= $db.chunk.max_depth">
+    <xsl:when test="$depth_in_chunk != 0">
       <xsl:value-of select="concat('#', $linkend)"/>
     </xsl:when>
     <xsl:otherwise>