diff options
author | Junio C Hamano <gitster@pobox.com> | 2019-12-01 09:04:41 -0800 |
---|---|---|
committer | Junio C Hamano <gitster@pobox.com> | 2019-12-01 09:04:41 -0800 |
commit | 6c630f237e72d3adef8a089bdf984ec1e47b2708 (patch) | |
tree | 876c2e2699c813cc93a9a967b154887bf21402e7 /t/t5100/msg0016 | |
parent | Merge branch 'ar/install-doc-update-cmds-needing-the-shell' (diff) | |
parent | gitweb: escape URLs generated by href() (diff) | |
download | tgif-6c630f237e72d3adef8a089bdf984ec1e47b2708.tar.xz |
Merge branch 'jk/gitweb-anti-xss'
Some codepaths in "gitweb" that forgot to escape URLs generated
based on end-user input have been corrected.
* jk/gitweb-anti-xss:
gitweb: escape URLs generated by href()
t/gitweb-lib.sh: set $REQUEST_URI
t/gitweb-lib.sh: drop confusing quotes
t9502: pass along all arguments in xss helper
Diffstat (limited to 't/t5100/msg0016')
0 files changed, 0 insertions, 0 deletions