Andreas Brauchli 77947bbe24 gitweb: escape link body in format_ref_marker ...

Fix a case where an html link can be generated from unescaped input
resulting in invalid strict xhtml or potentially injected code.

An overview of a repo with a tag "1.0.0&0.0.1" would previously result
in an unescaped ampersand in the link body.

Signed-off-by: Andreas Brauchli <a.brauchli@elementarea.net>
Acked-by: Jakub Narębski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>

2016-08-01 12:55:40 -07:00

246 KiB

Executable File

Raw Blame History

View Raw