From 68e23206961862a2b05f99ea0bbe82fe28e21367 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Wed, 21 Sep 2016 13:51:42 -0400 Subject: inline: Prevent creating a file named ".mdwn" when the postform is submitted with an empty title. --- IkiWiki/Plugin/inline.pm | 3 +++ 1 file changed, 3 insertions(+) (limited to 'IkiWiki/Plugin') diff --git a/IkiWiki/Plugin/inline.pm b/IkiWiki/Plugin/inline.pm index 19dd684dd..a85cd5d2f 100644 --- a/IkiWiki/Plugin/inline.pm +++ b/IkiWiki/Plugin/inline.pm @@ -121,6 +121,9 @@ sub sessioncgi ($$) { if ($q->param('do') eq 'blog') { my $page=titlepage(decode_utf8(scalar $q->param('title'))); $page=~s/(\/)/"__".ord($1)."__"/eg; # don't create subdirs + if (! length $page) { + error(gettext("please enter a page title")); + } # if the page already exists, munge it to be unique my $from=$q->param('from'); my $add=""; -- cgit v1.2.3