diff options
| author | Lars Hjemli | 2009-01-29 22:21:24 +0100 |
|---|---|---|
| committer | Lars Hjemli | 2009-01-29 22:21:24 +0100 |
| commit | d6174b7aab476c2b6a86e59d98cf978d603045f4 (patch) | |
| tree | ccc348a5887b2ca580aabfb3eca90bbd86a24386 | |
| parent | Merge branch 'stable' (diff) | |
| parent | html.c: use correct escaping in html attributes (diff) | |
| download | cgit-d6174b7aab476c2b6a86e59d98cf978d603045f4.tar.gz cgit-d6174b7aab476c2b6a86e59d98cf978d603045f4.zip | |
Merge branch 'stable'
| -rw-r--r-- | html.c | 6 |
1 files changed, 4 insertions, 2 deletions
| diff --git a/html.c b/html.c index d7d9fd7..66ba65d 100644 --- a/html.c +++ b/html.c | |||
| @@ -112,14 +112,16 @@ void html_attr(char *txt) | |||
| 112 | char *t = txt; | 112 | char *t = txt; |
| 113 | while(t && *t){ | 113 | while(t && *t){ |
| 114 | int c = *t; | 114 | int c = *t; |
| 115 | if (c=='<' || c=='>' || c=='\'') { | 115 | if (c=='<' || c=='>' || c=='\'' || c=='\"') { |
| 116 | write(htmlfd, txt, t - txt); | 116 | write(htmlfd, txt, t - txt); |
| 117 | if (c=='>') | 117 | if (c=='>') |
| 118 | html(">"); | 118 | html(">"); |
| 119 | else if (c=='<') | 119 | else if (c=='<') |
| 120 | html("<"); | 120 | html("<"); |
| 121 | else if (c=='\'') | 121 | else if (c=='\'') |
| 122 | html(""e;"); | 122 | html("'"); |
| 123 | else if (c=='"') | ||
| 124 | html("""); | ||
| 123 | txt = t+1; | 125 | txt = t+1; |
| 124 | } | 126 | } |
| 125 | t++; | 127 | t++; |