[LON-CAPA-cvs] cvs: loncom /interface lonfeedback.pm

[raeburn]

raeburn		Sat Jan 31 01:38:41 2026 EDT

  Modified files:              
    /loncom/interface	lonfeedback.pm 
  Log:
  - Satisfy w3c validation.
  
  
Index: loncom/interface/lonfeedback.pm
diff -u loncom/interface/lonfeedback.pm:1.395 loncom/interface/lonfeedback.pm:1.396
--- loncom/interface/lonfeedback.pm:1.395	Sat Jan 31 01:16:46 2026
+++ loncom/interface/lonfeedback.pm	Sat Jan 31 01:38:41 2026
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Feedback
 #
-# $Id: lonfeedback.pm,v 1.395 2026/01/31 01:16:46 raeburn Exp $
+# $Id: lonfeedback.pm,v 1.396 2026/01/31 01:38:41 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -1021,7 +1021,7 @@
 ENDDISCUSS
     if ($env{'form.origpage'}) {
         $postingform .= '<input type="hidden" name="origpage" value="'.
-                        $env{'form.origpage'}.'" />'."\n";
+                        &HTML::Entities::encode($env{'form.origpage'},'"<>&').'" />'."\n";
         foreach my $att (@{$currnewattach}) {
             $postingform .= '<input type="hidden" name="currnewattach" '.
                             'value="'.$att.'" />'."\n";
@@ -2059,19 +2059,13 @@
   $r->print(<<END);
 $options
 <br />
-END
-$r->print(&Apache::lonhtmlcommon::start_pick_box());
-$r->print(<<END);
-$quote
-<p>
 $textareaheader
-</p>
+$quote
 <div>
 $latexHelp
 </div>
 END
-
-    
+    $r->print(&Apache::lonhtmlcommon::start_pick_box());
     $r->print(&Apache::lonhtmlcommon::row_title('<label for="subject">'.
                                                 &mt('Subject').'</label>'));
     $r->print('<input type="text" name="subject" id="subject" size="30" value="'.
@@ -3702,7 +3696,10 @@
 
     my $end_page = 
 	&Apache::loncommon::end_page();
-				       
+    my $origpage;
+    if ($env{'form.origpage'} ne '') {
+        $origpage = &HTML::Entities::encode($env{'form.origpage'},'"<>&');
+    }
     $r->print(<<END);
 $start_page
 $toolarge
@@ -3752,7 +3749,7 @@
 <input type="hidden" name="timestamp" value="$env{'form.timestamp'}" />
 <input type="hidden" name="idx" value="$env{'form.idx'}" />
 <input type="hidden" name="numoldver" value="$env{'form.numoldver'}" />
-<input type="hidden" name="origpage" value="$env{'form.origpage'}" />
+<input type="hidden" name="origpage" value="$origpage" />
 <input type="hidden" name="blog" value="$env{'form.blog'}" />
 <input type="hidden" name="discuss" value="$env{'form.discuss'}" />
 END
@@ -3801,7 +3798,7 @@
 sub generate_attachments_button {
     my ($idx,$attachnum,$ressymb,$now,$currnewattach,$deloldattach,
         $numoldver,$mode,$blockblog) = @_;
-    my $origpage = $ENV{'REQUEST_URI'};
+    my $origpage = &HTML::Entities::encode($ENV{'REQUEST_URI'},'"<>&');
     my $att=$attachnum.' '.&mt("attachments");
     my %lt = &Apache::lonlocal::texthash(
                 'clic' => 'Add/remove attachments',