Fix for bug 38855: showvotes.cgi needs to escape (untrusted) url params

Patch by Myke Melez <myk@mozilla.org>
r= jake@acutex.net

1 files changed, 14 insertions, 0 deletions

diff --git a/CGI.pl b/CGI.pl
index 29d8f68ea..587ecc074 100644
--- a/CGI.pl
+++ b/CGI.pl
@@ -963,6 +963,20 @@ sub PutFooter {
 }
 
 
+sub DisplayError {
+  my ($message, $title) = (@_);
+  $title ||= "Error";
+
+  print "Content-type: text/html\n\n";
+  PutHeader($title);
+
+  print PerformSubsts( Param("errorhtml") , {errormsg => $message} );
+
+  PutFooter();
+
+  return 1;
+}
+
 sub PuntTryAgain ($) {
     my ($str) = (@_);
     print PerformSubsts(Param("errorhtml"),