From: Simon McVittie <smcv@ http://smcv.pseudorandom.co.uk/>
Date: Sun, 23 Nov 2008 12:03:05 +0000 (+0000)
Subject: comments: Use HTML entities to escape directives
X-Git-Tag: 2.71~124
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=3abfc1d71c914035deff75a4373041cb9962a471;p=ikiwiki.git

comments: Use HTML entities to escape directives
---

diff --git a/IkiWiki/Plugin/comments.pm b/IkiWiki/Plugin/comments.pm
index acc3ffdb3..a68026ebc 100644
--- a/IkiWiki/Plugin/comments.pm
+++ b/IkiWiki/Plugin/comments.pm
@@ -221,11 +221,11 @@ sub sessioncgi ($$) { #{{{
 
 	unless ($allow_directives) {
 		# don't allow new-style directives at all
-		$body =~ s/(^|[^\\])\[\[!/$1\\[[!/g;
+		$body =~ s/(^|[^\\])\[\[!/$1&#91;&#91;!/g;
 
 		# don't allow [[ unless it begins an old-style
 		# wikilink, if prefix_directives is off
-		$body =~ s/(^|[^\\])\[\[(?![^\n\s\]+]\]\])/$1\\[[!/g
+		$body =~ s/(^|[^\\])\[\[(?![^\n\s\]+]\]\])/$1&#91;&#91;!/g
 			unless $config{prefix_directives};
 	}