diff options
| author |  Andreas Brauchli <a.brauchli@elementarea.net> | 2016-07-29 16:49:37 +0200 |
|---|---|---|
| committer |  Junio C Hamano <gitster@pobox.com> | 2016-08-01 12:55:40 -0700 |
| commit | 77947bbe24e0306d1ce5605c962c4a25f5aca22f (patch) | |
| tree | 008a9810b413fb41071fba1829c93d335f216cf2 /git-gui | |
| parent | Git 2.8.4 (diff) | |
| download | tgif-77947bbe24e0306d1ce5605c962c4a25f5aca22f.tar.xz | |
gitweb: escape link body in format_ref_marker
Fix a case where an html link can be generated from unescaped input
resulting in invalid strict xhtml or potentially injected code.
An overview of a repo with a tag "1.0.0&0.0.1" would previously result
in an unescaped ampersand in the link body.
Signed-off-by: Andreas Brauchli <a.brauchli@elementarea.net>
Acked-by: Jakub Narębski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'git-gui')
0 files changed, 0 insertions, 0 deletions