diff options
| author | John Keeping <john@keeping.me.uk> | 2014-01-12 19:45:15 +0000 | 
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2014-01-12 23:02:02 +0100 | 
| commit | d1a6ece439e651a5b4ca535850e1c471f61c472e (patch) | |
| tree | 909836764b16fbe31486a2ea64cf9745bc771d03 | |
| parent | filter: pass extra arguments via cgit_open_filter (diff) | |
| download | cgit-d1a6ece439e651a5b4ca535850e1c471f61c472e.tar.gz cgit-d1a6ece439e651a5b4ca535850e1c471f61c472e.tar.bz2 cgit-d1a6ece439e651a5b4ca535850e1c471f61c472e.zip | |
ui-refs: escape HTML chars in author and tagger names
Everywhere else we use html_txt to escape any special characters in
these variables.  Do so here as well.
Signed-off-by: John Keeping <john@keeping.me.uk>
| -rw-r--r-- | ui-refs.c | 4 | 
1 files changed, 2 insertions, 2 deletions
| @@ -155,9 +155,9 @@ static int print_tag(struct refinfo *ref)  	html("</td><td>");  	if (info) {  		if (info->tagger) -			html(info->tagger); +			html_txt(info->tagger);  	} else if (ref->object->type == OBJ_COMMIT) { -		html(ref->commit->author); +		html_txt(ref->commit->author);  	}  	html("</td><td colspan='2'>");  	if (info) { | 
