- Improved security: Removed most [ns_conn form] calls in the system.

tcl/intranet-filestorage-procs.tcl

@@ -1607,7 +1607,7 @@ ad_proc -public im_filestorage_base_component { user_id object_id object_name ba
     set return_url [im_url_with_query]
 
     if {"" == $bread_crum_path} {
-        set bread_crum_path [ns_set get $bind_vars bread_crum_path]
+        set bread_crum_path [im_opt_val -limit_to nohtml bread_crum_path]
     }
     if {[im_security_alert_check_path -location "intranet-filestorage.im_filestorage_base_component" -value $bread_crum_path]} {
 	set bread_crum_path ""

www/action.tcl

@@ -67,7 +67,7 @@ array set perm_hash $perm_hash_array
 
 
 foreach var [ad_ns_set_keys $bind_vars] {
-    set value [ns_set get $bind_vars $var]
+    set value [im_opt_val -limit_to nohtml $var]
     if {[regexp {first_line_flag} $var]} {
 	ns_set delkey $bind_vars $var
     }
@@ -679,7 +679,7 @@ Are you sure you really want to delete the following files?
 
 set ctr 0
 foreach var [ad_ns_set_keys $bind_vars] {
-    set value [ns_set get $bind_vars $var]
+    set value [im_opt_val -limit_to nohtml $var]
     if {$ctr > 0} { append vars "&" }
     append vars "$var=$value\n"
     incr ctr