sanitize() must only be called on strings

Otherwise, we may call sanitize() and think it's safe when it's not.

Signed-off-by: Alberto Bertogli <albertito@blitiri.com.ar>

diff --git a/blitiri.cgi b/blitiri.cgi
index 6ada91bfb9d82ffa650188d8d5337aa37788058e..8ce429868956d2b0b5cd5be87c958816bd6022ca 100755 (executable)
--- a/blitiri.cgi
+++ b/blitiri.cgi
@@ -549,9 +549,7 @@ def valid_link(link):
        return None
 
 def sanitize(obj):
-       if isinstance(obj, basestring):
-               return cgi.escape(obj, True)
-       return obj
+       return cgi.escape(obj, quote = True)
 
 
 # find out our URL, needed for syndication