about summary refs log tree commit diff
diff options
context:
space:
mode:
authorJohn Keeping <john@keeping.me.uk>2014-01-12 19:45:15 +0000
committerJason A. Donenfeld <Jason@zx2c4.com>2014-01-12 23:02:02 +0100
commitd1a6ece439e651a5b4ca535850e1c471f61c472e (patch)
tree909836764b16fbe31486a2ea64cf9745bc771d03
parentfilter: pass extra arguments via cgit_open_filter (diff)
downloadcgit-pink-d1a6ece439e651a5b4ca535850e1c471f61c472e.tar.gz
cgit-pink-d1a6ece439e651a5b4ca535850e1c471f61c472e.zip
ui-refs: escape HTML chars in author and tagger names
Everywhere else we use html_txt to escape any special characters in
these variables.  Do so here as well.

Signed-off-by: John Keeping <john@keeping.me.uk>
-rw-r--r--ui-refs.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/ui-refs.c b/ui-refs.c
index 20c91e3..c97b0c6 100644
--- a/ui-refs.c
+++ b/ui-refs.c
@@ -155,9 +155,9 @@ static int print_tag(struct refinfo *ref)
 	html("</td><td>");
 	if (info) {
 		if (info->tagger)
-			html(info->tagger);
+			html_txt(info->tagger);
 	} else if (ref->object->type == OBJ_COMMIT) {
-		html(ref->commit->author);
+		html_txt(ref->commit->author);
 	}
 	html("</td><td colspan='2'>");
 	if (info) {