Andrew's git / gitweb.git / diff
?
gitweb: esc_html() author in blame
authorLuben Tuikov <ltuikov@yahoo.com>
Mon, 30 Oct 2006 20:37:54 +0000 (12:37 -0800)
committerJunio C Hamano <junkio@cox.net>
Wed, 1 Nov 2006 19:31:55 +0000 (11:31 -0800)
Blame fails for example on
block/ll_rw_blk.c at v2.6.19-rc3.

Signed-off-by: Luben Tuikov <ltuikov@yahoo.com>
Signed-off-by: Junio C Hamano <junkio@cox.net>
gitweb/gitweb.perl patch | blob | history
diff --git a/gitweb/gitweb.perl b/gitweb/gitweb.perl
index ec46b8091bac2fa890c5e7356482b0842a7d829a..bfadbe25c6f250bf88769aee7449615af4469e65 100755 (executable)
--- a/gitweb/gitweb.perl
+++ b/gitweb/gitweb.perl
@@ -2659,7 +2659,7 @@ sub git_blame2 {
                print "<tr class=\"$rev_color[$current_color]\">\n";
                if ($group_size) {
                        print "<td class=\"sha1\"";
                print "<tr class=\"$rev_color[$current_color]\">\n";
                if ($group_size) {
                        print "<td class=\"sha1\"";
-                       print " title=\"$author, $date\"";
+                       print " title=\"". esc_html($author) . ", $date\"";
                        print " rowspan=\"$group_size\"" if ($group_size > 1);
                        print ">";
                        print $cgi->a({-href => href(action=>"commit",
                        print " rowspan=\"$group_size\"" if ($group_size > 1);
                        print ">";
                        print $cgi->a({-href => href(action=>"commit",