ui-tag: escape tagnames properly

Signed-off-by: Lars Hjemli <hjemli@gmail.com>

diff --git a/ui-tag.c b/ui-tag.c
index 3aea87d8032869c4adcc6b4041f16729b5db1a00..54b9f4c71b6372090d2df6ffe2aa487ffa386c9a 100644 (file)
--- a/ui-tag.c
+++ b/ui-tag.c
@@ -53,8 +53,9 @@ void cgit_print_tag(char *revname)
                        return;
                }
                html("<table class='commit-info'>\n");
-               htmlf("<tr><td>Tag name</td><td>%s (%s)</td></tr>\n",
-                     revname, sha1_to_hex(sha1));
+               htmlf("<tr><td>Tag name</td><td>");
+               html_txt(revname);
+               htmlf(" (%s)</td></tr>\n", sha1_to_hex(sha1));
                if (info->tagger_date > 0) {
                        html("<tr><td>Tag date</td><td>");
                        cgit_print_date(info->tagger_date, FMT_LONGDATE, ctx.cfg.local_time);