git.99rst.org Git - git.git/commit

author	Jeff King <redacted>
	Mon, 12 Nov 2012 21:34:28 +0000 (16:34 -0500)
committer	Jeff King <redacted>
	Mon, 12 Nov 2012 21:34:53 +0000 (16:34 -0500)
commit	0f0ecf68b31303de7cb428554e27d433fe62180e
tree	d1f8f5902fb5ff6dd45ba21e6fce2a5d6e7f185d	tree \| snapshot
parent	7e2010537e96d0a1144520222f20ba1dc3d61441	commit \| diff

gitweb: escape html in rss title

The title of an RSS feed is generated from many components,
including the filename provided as a query parameter, but we
failed to quote it. Besides showing the wrong output, this
is a vector for XSS attacks.

Signed-off-by: Jeff King <redacted>

gitweb/gitweb.perl		diff \| blob \| history
t/t9502-gitweb-standalone-parse-output.sh		diff \| blob \| history

RSS Atom

git clone https://git.99rst.org/PROJECT