]> granicus.if.org Git - cgit/commit
projects / cgit / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2a8f553) | patch
ui-plain.c: fix html and links generated by print_dir() and print_dir_entry()
authorLars Hjemli <hjemli@gmail.com>
Sun, 12 Jun 2011 20:49:35 +0000 (20:49 +0000)
committerLars Hjemli <hjemli@gmail.com>
Sun, 12 Jun 2011 21:21:30 +0000 (21:21 +0000)
commit7f88d20823ad9d375900657334bc27793860f6ee
treec9f9a0048cae2d94e97138e9ea82e2a103b215adtree | snapshot
parent2a8f553163d642e60092ced20631e1020581273bcommit | diff
ui-plain.c: fix html and links generated by print_dir() and print_dir_entry()

This patch fixes the following issues:
* the base argument usually isn't zero-terminated, so printing base
  without considering baselen will usually generate random garbage
* when the current url represents a directory but doesn't end in a slash,
  relative urls would be incorrect
* using unescaped paths allows XSS

Signed-off-by: Lars Hjemli <hjemli@gmail.com>
ui-plain.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.