Pullup ticket 2478 - requested by kefren
Security patch for mono

Revisions pulled up:
- lang/mono/Makefile		1.69
- lang/mono/distinfo		1.36
- lang/mono/patches/patch-cf	1.1
- lang/mono/patches/patch-cg	1.1
- lang/mono/patches/patch-ch	1.1
- lang/mono/patches/patch-ci	1.1
- lang/mono/patches/patch-cj	1.1
- lang/mono/patches/patch-ck	1.1
---
    Module Name:	pkgsrc
    Committed By:	kefren
    Date:		Sat Aug  9 19:57:51 UTC 2008

    Modified Files:
	pkgsrc/lang/mono: Makefile distinfo
    Added Files:
	pkgsrc/lang/mono/patches: patch-cf patch-cg patch-ch patch-ci patch-cj
	    patch-ck

    Log Message:
    fix an cross site scripting vulnerability
    bump PKGREVISION


(tron)

$NetBSD: patch-cf,v 1.1.2.2 2008/08/10 15:27:26 tron Exp $
--- mcs/class/System.Web/System.Web.UI.HtmlControls/ChangeLog.orig	2008-02-06 22:38:44.000000000 +0200
+++ mcs/class/System.Web/System.Web.UI.HtmlControls/ChangeLog	2008-08-09 22:23:02.000000000 +0300
@@ -1,3 +1,10 @@
+2008-07-25  Dean Brettle <dean@brettle.com>
+
+	* HtmlControl.cs (PreProcessRelativeReference), 
+	HtmlForm.cs (RenderAttributes), HtmlInputButton (RenderAttributes),
+	HtmlInputRadioButton (RenderAttributes), HtmlSelect (RenderChildren):
+	Encode attributes that could contain HTML special chars.
+
 2008-02-06  Marek Habersack  <mhabersack@novell.com>
 
 	* HtmlMeta.cs: render XHTML compliant tag if not in the Legacy

$NetBSD: patch-cg,v 1.1.2.2 2008/08/10 15:27:26 tron Exp $
--- mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlControl.cs.orig	2007-11-09 00:10:32.000000000 +0200
+++ mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlControl.cs	2008-08-09 22:23:02.000000000 +0300
@@ -90,7 +90,7 @@
 					catch (Exception) {
 						throw new HttpException(attribName + " property had malformed url");
 					}
-					writer.WriteAttribute(attribName, attr);
+					writer.WriteAttribute(attribName, attr, true);
 					Attributes.Remove(attribName);
 				}
 			}

$NetBSD: patch-ch,v 1.1.2.2 2008/08/10 15:27:26 tron Exp $
--- mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlForm.cs.orig	2008-01-30 00:04:11.000000000 +0200
+++ mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlForm.cs	2008-08-09 22:23:02.000000000 +0300
@@ -276,7 +276,7 @@
 				w.WriteAttribute ("name", Name);
 
 			w.WriteAttribute ("method", Method);
-			w.WriteAttribute ("action", action);
+			w.WriteAttribute ("action", action, true);
 
 			/*
 			 * This is a hack that guarantees the ID is set properly for HtmlControl to

$NetBSD: patch-ci,v 1.1.2.2 2008/08/10 15:27:26 tron Exp $
--- mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlInputButton.cs.orig	2007-11-09 00:10:32.000000000 +0200
+++ mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlInputButton.cs	2008-08-09 22:23:02.000000000 +0300
@@ -302,7 +302,7 @@
 				
 				if (oc != null) {
 					writer.WriteAttribute ("language", "javascript");
-					writer.WriteAttribute ("onclick", oc);
+					writer.WriteAttribute ("onclick", oc, true);
 				}
 			}
 #endif

$NetBSD: patch-cj,v 1.1.2.2 2008/08/10 15:27:26 tron Exp $
--- mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlInputRadioButton.cs.orig	2007-11-09 00:10:32.000000000 +0200
+++ mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlInputRadioButton.cs	2008-08-09 22:23:02.000000000 +0300
@@ -126,7 +126,7 @@
 			if (Page != null)
 				Page.ClientScript.RegisterForEventValidation (this.UniqueID, Value);
 #endif
-			writer.WriteAttribute ("value", Value);
+			writer.WriteAttribute ("value", Value, true);
 			Attributes.Remove ("value");
 			base.RenderAttributes (writer);
 		}

$NetBSD: patch-ck,v 1.1.2.2 2008/08/10 15:27:26 tron Exp $
--- mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlSelect.cs.orig	2008-01-30 00:04:11.000000000 +0200
+++ mcs/class/System.Web/System.Web.UI.HtmlControls/HtmlSelect.cs	2008-08-09 22:23:02.000000000 +0300
@@ -693,7 +693,7 @@
 					}
 				}
 				
-				w.WriteAttribute ("value", item.Value);
+				w.WriteAttribute ("value", item.Value, true);
 				w.Write (HtmlTextWriter.TagRightChar);
 				
 				w.Write (item.Text);