payfrit/payfrit-biz
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix unescaped # in Uber Eats HTML entity unescaping

Browse source 
CFML was failing to compile analyzeMenuUrl.cfm because ' contains
a # character that Lucee interprets as variable expression start.
Escaped all 4 occurrences to &##39;.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
John Mizerek 2026-03-08 18:46:33 -07:00
parent 717d60d6e6
commit 57d31c0428
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
api/setup/analyzeMenuUrl.cfm
View file

@ -1837,7 +1837,7 @@
<cfset ueBusiness["name"] = replace(ueBusiness.name, "&amp;", "&", "all")>
<cfset ueBusiness["name"] = replace(ueBusiness.name, "&lt;", "<", "all")>
<cfset ueBusiness["name"] = replace(ueBusiness.name, "&gt;", ">", "all")>
<cfset ueBusiness["name"] = replace(ueBusiness.name, "&#39;", "'", "all")>
<cfset ueBusiness["name"] = replace(ueBusiness.name, "&##39;", "'", "all")>
<cfset ueBusiness["name"] = replace(ueBusiness.name, "&apos;", "'", "all")>
<cfif structKeyExists(ueRestaurant, "address") AND isStruct(ueRestaurant.address)>
@ -1860,7 +1860,7 @@
<cfset ueCatName = structKeyExists(ueSection, "name") ? trim(ueSection.name) : "Menu">
<!--- Unescape HTML entities --->
<cfset ueCatName = replace(ueCatName, "&amp;", "&", "all")>
<cfset ueCatName = replace(ueCatName, "&#39;", "'", "all")>
<cfset ueCatName = replace(ueCatName, "&##39;", "'", "all")>
<cfset ueCatName = replace(ueCatName, "&apos;", "'", "all")>
<cfset ueSectionItemCount = 0>
@ -1871,14 +1871,14 @@
<!--- Unescape HTML entities in name and description --->
<cfset ueItemName = replace(ueItemName, "&amp;", "&", "all")>
<cfset ueItemName = replace(ueItemName, "&#39;", "'", "all")>
<cfset ueItemName = replace(ueItemName, "&##39;", "'", "all")>
<cfset ueItemName = replace(ueItemName, "&apos;", "'", "all")>
<cfset ueItemName = replace(ueItemName, "&lt;", "<", "all")>
<cfset ueItemName = replace(ueItemName, "&gt;", ">", "all")>
<cfset ueItemDesc = structKeyExists(ueMenuItem, "description") ? trim(ueMenuItem.description) : "">
<cfset ueItemDesc = replace(ueItemDesc, "&amp;", "&", "all")>
<cfset ueItemDesc = replace(ueItemDesc, "&#39;", "'", "all")>
<cfset ueItemDesc = replace(ueItemDesc, "&##39;", "'", "all")>
<cfset ueItemDesc = replace(ueItemDesc, "&apos;", "'", "all")>
<!--- Extract price from offers --->