diff options
| author | John Keeping | 2014-01-12 19:45:15 +0000 |
|---|---|---|
| committer | Jason A. Donenfeld | 2014-01-12 23:02:02 +0100 |
| commit | d1a6ece439e651a5b4ca535850e1c471f61c472e (patch) | |
| tree | 909836764b16fbe31486a2ea64cf9745bc771d03 /ui-refs.c | |
| parent | filter: pass extra arguments via cgit_open_filter (diff) | |
| download | cgit-d1a6ece439e651a5b4ca535850e1c471f61c472e.tar.gz cgit-d1a6ece439e651a5b4ca535850e1c471f61c472e.zip | |
ui-refs: escape HTML chars in author and tagger names
Everywhere else we use html_txt to escape any special characters in these variables. Do so here as well. Signed-off-by: John Keeping <john@keeping.me.uk>
Diffstat (limited to 'ui-refs.c')
| -rw-r--r-- | ui-refs.c | 4 |
1 files changed, 2 insertions, 2 deletions
| diff --git a/ui-refs.c b/ui-refs.c index 20c91e3..c97b0c6 100644 --- a/ui-refs.c +++ b/ui-refs.c | |||
| @@ -155,9 +155,9 @@ static int print_tag(struct refinfo *ref) | |||
| 155 | html("</td><td>"); | 155 | html("</td><td>"); |
| 156 | if (info) { | 156 | if (info) { |
| 157 | if (info->tagger) | 157 | if (info->tagger) |
| 158 | html(info->tagger); | 158 | html_txt(info->tagger); |
| 159 | } else if (ref->object->type == OBJ_COMMIT) { | 159 | } else if (ref->object->type == OBJ_COMMIT) { |
| 160 | html(ref->commit->author); | 160 | html_txt(ref->commit->author); |
| 161 | } | 161 | } |
| 162 | html("</td><td colspan='2'>"); | 162 | html("</td><td colspan='2'>"); |
| 163 | if (info) { | 163 | if (info) { |