Author: Lars Hjemli <hjemli@gmail.com>
ui-tag: escape tagnames properly Signed-off-by: Lars Hjemli <hjemli@gmail.com>
ui-tag.c | 5 +++--
diff --git a/ui-tag.c b/ui-tag.c index 3aea87d8032869c4adcc6b4041f16729b5db1a00..54b9f4c71b6372090d2df6ffe2aa487ffa386c9a 100644 --- a/ui-tag.c +++ b/ui-tag.c @@ -53,8 +53,9 @@ cgit_print_error(fmt("Bad tag object: %s", revname)); return; } html("<table class='commit-info'>\n"); - htmlf("<tr><td>Tag name</td><td>%s (%s)</td></tr>\n", - revname, sha1_to_hex(sha1)); + htmlf("<tr><td>Tag name</td><td>"); + html_txt(revname); + htmlf(" (%s)</td></tr>\n", sha1_to_hex(sha1)); if (info->tagger_date > 0) { html("<tr><td>Tag date</td><td>"); cgit_print_date(info->tagger_date, FMT_LONGDATE, ctx.cfg.local_time);