diff options
| author |  Petr Baudis <pasky@suse.cz> | 2006-09-24 00:18:41 +0200 |
|---|---|---|
| committer |  Junio C Hamano <junkio@cox.net> | 2006-09-23 23:53:18 -0700 |
| commit | a2f3db2f5de2a3667b0e038aa65e3e097e642e7d (patch) | |
| tree | 521959c2df89fa89837b1dafdf5a158525fcb885 /builtin-verify-pack.c | |
| parent | Deprecate git-resolve.sh (diff) | |
| download | tgif-a2f3db2f5de2a3667b0e038aa65e3e097e642e7d.tar.xz | |
gitweb: Consolidate escaping/validation of query string
Consider:
http://repo.or.cz/?p=glibc-cvs.git;a=tree;h=2609cb0411389325f4ee2854cc7159756eb0671e;hb=2609cb0411389325f4ee2854cc7159756eb0671e
(click on the funny =__ify file)
We ought to handle anything in filenames and I actually see no reason why
we don't, modulo very little missing escaping that this patch hopefully
also fixes.
I have also made esc_param() escape [?=&;]. Not escaping [&;] was downright
buggy and [?=] just feels better escaped. ;-) YMMV.
Signed-off-by: Petr Baudis <pasky@suse.cz>
Signed-off-by: Junio C Hamano <junkio@cox.net>
Diffstat (limited to 'builtin-verify-pack.c')
0 files changed, 0 insertions, 0 deletions