Escape HTML output and add vim syntax hint.

plugins/squirrelspell/modules/check_me.mod

@@ -116,7 +116,7 @@ if ($sqspell_exitcode){
   $msg= "<div align='center'>"
      . sprintf(_("I tried to execute '%s', but it returned:"),
                $sqspell_command) . "<pre>"
-     . nl2br(join("\n", $sqspell_output)) . "</pre>"
+     . join("\n", htmlspecialchars($sqspell_output)) . "</pre>"
      . "<form onsubmit=\"return false\">"
      . "<input type=\"submit\" value=\"  " . _("Close")
      . "  \" onclick=\"self.close()\"></form></div>";
@@ -442,5 +442,6 @@ if ($errors){
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */
 ?>

plugins/squirrelspell/modules/crypto.mod

@@ -70,6 +70,7 @@ sqspell_makePage( _("Personal Dictionary Crypto Settings"), null, $msg);
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */
 
 ?>

plugins/squirrelspell/modules/crypto_badkey.mod

@@ -92,5 +92,6 @@ if ($old_key){
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */    
 ?>

plugins/squirrelspell/modules/edit_dic.mod

@@ -82,7 +82,8 @@ if (!$words){
 	  $msg .= "</td><td valign=\"top\">\n";
 	}
 	$msg .= "<input type=\"checkbox\" name=\"words_ary[]\" "
-	   . "value=\"$words_ary[$j]\"> $words_ary[$j]<br>";
+	   . 'value="'.htmlspecialchars($words_ary[$j]). '"> '
+           . htmlspecialchars($words_ary[$j]) . "<br>\n";
       }
       $msg .= '</td></tr></table></td></tr>'
 	 . "<tr bgcolor=\"$color[0]\" align=\"center\"><td>"
@@ -108,6 +109,7 @@ if (!$words){
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */
 
 ?>

plugins/squirrelspell/modules/enc_setup.mod

@@ -81,6 +81,7 @@ sqspell_makePage(_("Personal Dictionary Crypto Settings"),
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */ 
 
 ?>

plugins/squirrelspell/modules/forget_me.mod

@@ -37,7 +37,7 @@ if (sizeof($words_ary)){
      * Remove word by word...
      */
     $lang_words=str_replace("$words_ary[$i]\n", "", $lang_words);
-    $msg .= "<li>$words_ary[$i]</li>\n";
+    $msg .= '<li>' . htmlspecialchars($words_ary[$i]) . "</li>\n";
   }
   $new_words_ary=split("\n", $lang_words);
   /**
@@ -87,5 +87,6 @@ if (sizeof($words_ary)){
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */    
 ?>

plugins/squirrelspell/modules/forget_me_not.mod

@@ -79,6 +79,7 @@ sqspell_makeWindow($onload, _("Personal Dictionary Updated"), null, $msg);
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */
 
 ?>

plugins/squirrelspell/modules/init.mod

@@ -61,6 +61,7 @@ sqspell_makeWindow($onload, _("SquirrelSpell Initiating"), "init.js", $msg);
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */
     
 ?>

plugins/squirrelspell/modules/lang_change.mod

@@ -99,5 +99,6 @@ sqspell_makePage(_("International Dictionaries Preferences Updated"),
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */
 ?>

plugins/squirrelspell/modules/lang_setup.mod

@@ -54,6 +54,7 @@ sqspell_makePage(_("Add International Dictionaries"), null, $msg);
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */
  
 ?>

plugins/squirrelspell/modules/options_main.mod

@@ -52,5 +52,6 @@ sqspell_makePage( _("SquirrelSpell Options Menu"), null, $msg);
  * Local variables:
  * mode: php
  * End:
+ * vim: syntax=php
  */
 ?>