]> granicus.if.org Git - git/commit
projects / git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0b65a8d) | patch
gitweb: escape link body in format_ref_marker
authorAndreas Brauchli <a.brauchli@elementarea.net>
Fri, 29 Jul 2016 14:49:37 +0000 (16:49 +0200)
committerJunio C Hamano <gitster@pobox.com>
Mon, 1 Aug 2016 19:55:40 +0000 (12:55 -0700)
commit77947bbe24e0306d1ce5605c962c4a25f5aca22f
tree008a9810b413fb41071fba1829c93d335f216cf2tree | snapshot
parent0b65a8dbdb38962e700ee16776a3042beb489060commit | diff
gitweb: escape link body in format_ref_marker

Fix a case where an html link can be generated from unescaped input
resulting in invalid strict xhtml or potentially injected code.

An overview of a repo with a tag "1.0.0&0.0.1" would previously result
in an unescaped ampersand in the link body.

Signed-off-by: Andreas Brauchli <a.brauchli@elementarea.net>
Acked-by: Jakub Narębski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
gitweb/gitweb.perl diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.