Junio C Hamano 6c630f237e Merge branch 'jk/gitweb-anti-xss' ...

Some codepaths in "gitweb" that forgot to escape URLs generated
based on end-user input have been corrected.

* jk/gitweb-anti-xss:
  gitweb: escape URLs generated by href()
  t/gitweb-lib.sh: set $REQUEST_URI
  t/gitweb-lib.sh: drop confusing quotes
  t9502: pass along all arguments in xss helper

2019-12-01 09:04:41 -08:00

247 KiB

Executable File

Raw Blame History

View Raw