aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJohn Keeping2014-01-12 19:45:15 +0000
committerJason A. Donenfeld2014-01-12 23:02:02 +0100
commitd1a6ece439e651a5b4ca535850e1c471f61c472e (patch)
tree909836764b16fbe31486a2ea64cf9745bc771d03
parent3d8a6507ca542881a5e8b30ad6b7068a9c4fdeea (diff)
downloadcgit-d1a6ece439e651a5b4ca535850e1c471f61c472e.tar.gz
cgit-d1a6ece439e651a5b4ca535850e1c471f61c472e.tar.bz2
cgit-d1a6ece439e651a5b4ca535850e1c471f61c472e.zip
ui-refs: escape HTML chars in author and tagger names
Everywhere else we use html_txt to escape any special characters in these variables. Do so here as well. Signed-off-by: John Keeping <john@keeping.me.uk>
-rw-r--r--ui-refs.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/ui-refs.c b/ui-refs.c
index 20c91e3..c97b0c6 100644
--- a/ui-refs.c
+++ b/ui-refs.c
@@ -155,9 +155,9 @@ static int print_tag(struct refinfo *ref)
155 html("</td><td>"); 155 html("</td><td>");
156 if (info) { 156 if (info) {
157 if (info->tagger) 157 if (info->tagger)
158 html(info->tagger); 158 html_txt(info->tagger);
159 } else if (ref->object->type == OBJ_COMMIT) { 159 } else if (ref->object->type == OBJ_COMMIT) {
160 html(ref->commit->author); 160 html_txt(ref->commit->author);
161 } 161 }
162 html("</td><td colspan='2'>"); 162 html("</td><td colspan='2'>");
163 if (info) { 163 if (info) {