diff options
| author | John Keeping <john@keeping.me.uk> | 2014-01-12 19:45:15 +0000 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2014-01-12 23:02:02 +0100 |
| commit | d1a6ece439e651a5b4ca535850e1c471f61c472e (patch) | |
| tree | 909836764b16fbe31486a2ea64cf9745bc771d03 | |
| parent | filter: pass extra arguments via cgit_open_filter (diff) | |
| download | cgit-pink-d1a6ece439e651a5b4ca535850e1c471f61c472e.tar.gz cgit-pink-d1a6ece439e651a5b4ca535850e1c471f61c472e.zip | |
ui-refs: escape HTML chars in author and tagger names
Everywhere else we use html_txt to escape any special characters in these variables. Do so here as well. Signed-off-by: John Keeping <john@keeping.me.uk>
| -rw-r--r-- | ui-refs.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ui-refs.c b/ui-refs.c index 20c91e3..c97b0c6 100644 --- a/ui-refs.c +++ b/ui-refs.c @@ -155,9 +155,9 @@ static int print_tag(struct refinfo *ref) html("</td><td>"); if (info) { if (info->tagger) - html(info->tagger); + html_txt(info->tagger); } else if (ref->object->type == OBJ_COMMIT) { - html(ref->commit->author); + html_txt(ref->commit->author); } html("</td><td colspan='2'>"); if (info) { |