Oops, wrong place. It was in the logo stuff instead.

diff --git a/ext/standard/info.c b/ext/standard/info.c
index 23a5c96544662485c9b375f151b08056453a6583..91f2c18df91ced23d03dc5b28ed476ff7801b502 100644 (file)
--- a/ext/standard/info.c
+++ b/ext/standard/info.c
@@ -408,7 +408,9 @@ PHPAPI void php_print_info(int flag TSRMLS_DC)
                if (expose_php && !sapi_module.phpinfo_as_text) {
                        PUTS("<a href=\"http://www.php.net/\"><img border=\"0\" src=\"");
                        if (SG(request_info).request_uri) {
-                               PUTS(SG(request_info).request_uri);
+                               char *elem_esc = php_info_html_esc(SG(request_info).request_uri TSRMLS_CC);
+                               PUTS(elem_esc);
+                               efree(elem_esc);
                        }
                        if ((ta->tm_mon==3) && (ta->tm_mday==1)) {
                                PUTS("?="PHP_EGG_LOGO_GUID"\" alt=\"Nadia!\" /></a>");
@@ -510,7 +512,9 @@ PHPAPI void php_print_info(int flag TSRMLS_DC)
                if (expose_php && !sapi_module.phpinfo_as_text) {
                        PUTS("<a href=\"http://www.zend.com/\"><img border=\"0\" src=\"");
                        if (SG(request_info).request_uri) {
-                               PUTS(SG(request_info).request_uri);
+                               char *elem_esc = php_info_html_esc(SG(request_info).request_uri TSRMLS_CC);
+                               PUTS(elem_esc);
+                               efree(elem_esc);
                        }
                        PUTS("?="ZEND_LOGO_GUID"\" alt=\"Zend logo\" /></a>\n");
                }
@@ -525,7 +529,9 @@ PHPAPI void php_print_info(int flag TSRMLS_DC)
                php_info_print_hr();
                PUTS("<h1><a href=\"");
                if (SG(request_info).request_uri) {
-                       PUTS(SG(request_info).request_uri);
+                       char *elem_esc = php_info_html_esc(SG(request_info).request_uri TSRMLS_CC);
+                       PUTS(elem_esc);
+                       efree(elem_esc);
                }
                PUTS("?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000\">");
                PUTS("PHP Credits");
@@ -593,9 +599,7 @@ PHPAPI void php_print_info(int flag TSRMLS_DC)
                php_info_print_table_start();
                php_info_print_table_header(2, "Variable", "Value");
                if (zend_hash_find(&EG(symbol_table), "PHP_SELF", sizeof("PHP_SELF"), (void **) &data) != FAILURE) {
-                       char *elem_esc = php_info_html_esc(Z_STRVAL_PP(data) TSRMLS_CC);
-                       php_info_print_table_row(2, "PHP_SELF", elem_esc);
-                       efree(elem_esc);
+                       php_info_print_table_row(2, "PHP_SELF", Z_STRVAL_PP(data));
                }
                if (zend_hash_find(&EG(symbol_table), "PHP_AUTH_TYPE", sizeof("PHP_AUTH_TYPE"), (void **) &data) != FAILURE) {
                        php_info_print_table_row(2, "PHP_AUTH_TYPE", Z_STRVAL_PP(data));