update wheel to avoid XSS

[wheel.git] / wheel / wheel.pl

diff --git a/wheel/wheel.pl b/wheel/wheel.pl
index 0c319235c049f0f5791dbfed4916012ead32c234..3facfe94cdde22e7d95d44e4218383beecb6371c 100755 (executable)
--- a/wheel/wheel.pl
+++ b/wheel/wheel.pl
@@ -20,7 +20,7 @@
 
 
 
-my $VERSION=q$Id: wheel.pl,v 1.2 2004-10-19 01:16:18 don Exp $;
+my $VERSION=q$Id: wheel.pl,v 1.4 2009-10-20 21:23:36 don Exp $;
 
 # Intial Released Version 0.10
 # p01: Fixing displayed angle
@@ -39,6 +39,8 @@ use GD;
 use GD::Text::Align;
 use POSIX;
 
+use HTML::Entities qw(encode_entities);
+
 
 sub round($) {
   my ($a) = @_;
@@ -521,8 +523,23 @@ else {
   print $q->header();
   print $q->start_html('Helical Wheel Projections');
   if (defined $q->param('submit') and $q->param('submit')=~/Submit/) {
-    print $q->h1('Wheel:'.$q->param('sequence'));
+    print $q->h1('Wheel:'.encode_entities($q->param('sequence')));
     print $q->img({-src=>$q->self_url.'&draw=yes'});
+
+    print <<OUT
+<table width="400"><tr><td>By default the output presents the
+hydrophilic residues as circles, hydrophobic residues as diamonds,
+potentially negatively charged as triangles, and potentially
+positively charged as pentagons. Hydrophobicity is color coded as
+well: the most hydrophobic residue is green, and the amount of green
+is decreasing proportionally to the hydrophobicity, with zero
+hydrophobicity coded as yellow. Hydrophilic residues are coded red
+with pure red being the most hydrophilic (uncharged) residue, and the
+amount of red decreasing proportionally to the hydrophilicity. The
+potentially charged residues are light blue. (The color will not apply
+if you turn off color.)</td></tr></table>
+OUT
+
   }
   print $q->h1('Helical Wheel Projections'),
     $q->start_form(-method=>'GET'),