diff options
author | Lars Hjemli <hjemli@gmail.com> | 2009-01-29 22:21:24 +0100 |
---|---|---|
committer | Lars Hjemli <hjemli@gmail.com> | 2009-01-29 22:21:24 +0100 |
commit | d6174b7aab476c2b6a86e59d98cf978d603045f4 (patch) | |
tree | ccc348a5887b2ca580aabfb3eca90bbd86a24386 | |
parent | Merge branch 'stable' (diff) | |
parent | html.c: use correct escaping in html attributes (diff) | |
download | cgit-pink-d6174b7aab476c2b6a86e59d98cf978d603045f4.tar.gz cgit-pink-d6174b7aab476c2b6a86e59d98cf978d603045f4.zip |
Merge branch 'stable'
-rw-r--r-- | html.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/html.c b/html.c index d7d9fd7..66ba65d 100644 --- a/html.c +++ b/html.c @@ -112,14 +112,16 @@ void html_attr(char *txt) char *t = txt; while(t && *t){ int c = *t; - if (c=='<' || c=='>' || c=='\'') { + if (c=='<' || c=='>' || c=='\'' || c=='\"') { write(htmlfd, txt, t - txt); if (c=='>') html(">"); else if (c=='<') html("<"); else if (c=='\'') - html(""e;"); + html("'"); + else if (c=='"') + html("""); txt = t+1; } t++; |