diff options
| author | Andreas Brauchli <a.brauchli@elementarea.net> | 2016-07-29 17:49:37 +0300 |
|---|---|---|
| committer | Junio C Hamano <gitster@pobox.com> | 2016-08-01 22:55:40 +0300 |
| commit | 77947bbe24e0306d1ce5605c962c4a25f5aca22f (patch) | |
| tree | 008a9810b413fb41071fba1829c93d335f216cf2 /diffcore.h | |
| parent | 0b65a8dbdb38962e700ee16776a3042beb489060 (diff) | |
gitweb: escape link body in format_ref_marker
Fix a case where an html link can be generated from unescaped input
resulting in invalid strict xhtml or potentially injected code.
An overview of a repo with a tag "1.0.0&0.0.1" would previously result
in an unescaped ampersand in the link body.
Signed-off-by: Andreas Brauchli <a.brauchli@elementarea.net>
Acked-by: Jakub Narębski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'diffcore.h')
0 files changed, 0 insertions, 0 deletions