crtxcr
/
cgitsb
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ui-refs: escape HTML chars in author and tagger names 

Everywhere else we use html_txt to escape any special characters in
these variables.  Do so here as well.

Signed-off-by: John Keeping <john@keeping.me.uk>
This commit is contained in:
John Keeping 2014-01-12 19:45:15 +00:00 committed by Jason A. Donenfeld
parent 3d8a6507ca
commit d1a6ece439
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ui-refs.c
View File

@ -155,9 +155,9 @@ static int print_tag(struct refinfo *ref)
html("</td><td>");
if (info) {
if (info->tagger)
html(info->tagger);
html_txt(info->tagger);
} else if (ref->object->type == OBJ_COMMIT) {
html(ref->commit->author);
html_txt(ref->commit->author);
}
html("</td><td colspan='2'>");
if (info) {