[PATCH] gitweb: esc_html() author in blame
From: Luben Tuikov <hidden>
Date: 2016-08-11 20:35:03
Subsystem:
the rest · Maintainer:
Linus Torvalds
Blame fails for example on block/ll_rw_blk.c at v2.6.19-rc3. Signed-off-by: Luben Tuikov <redacted> --- gitweb/gitweb.perl | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/gitweb/gitweb.perl b/gitweb/gitweb.perl
index c52e19d..177efd3 100755
--- a/gitweb/gitweb.perl
+++ b/gitweb/gitweb.perl@@ -2751,7 +2751,7 @@ HTML print "<tr class=\"$rev_color[$current_color]\">\n"; if ($group_size) { print "<td class=\"sha1\""; - print " title=\"$author, $date\""; + print " title=\"". esc_html($author) . ", $date\""; print " rowspan=\"$group_size\"" if ($group_size > 1); print ">"; print $cgi->a({-href => href(action=>"commit",
--
1.4.3.3.g1e64f-dirty