cgit

commit a45030f8ee10bc97ffcf1bf0061a2e6f22c7252a

Author: John Keeping <john@keeping.me.uk>

ui-shared: URL-escape script_name

As far as I know, there is no requirement that $SCRIPT_NAME contain only
URL-safe characters, so we need to make sure that any special characters
are escaped.

Signed-off-by: John Keeping <john@keeping.me.uk>

 ui-shared.c | 4 ++--


diff --git a/ui-shared.c b/ui-shared.c
index 2c12de73d7cea9885f31fa58e0b5b325088b436e..abe15cdaee8eb3e1986a0a740caf1ad0b7eb83ad 100644
--- a/ui-shared.c
+++ b/ui-shared.c
@@ -139,7 +139,7 @@
 	if (ctx.cfg.virtual_root)
 		html_attr(ctx.cfg.virtual_root);
 	else
-		html(ctx.cfg.script_name);
+		html_url_path(ctx.cfg.script_name);
 
 	if (page) {
 		htmlf("?p=%s", page);
@@ -219,7 +219,7 @@ 			if (path)
 				html_url_path(path);
 		}
 	} else {
-		html(ctx.cfg.script_name);
+		html_url_path(ctx.cfg.script_name);
 		html("?url=");
 		html_url_arg(ctx.repo->url);
 		if (ctx.repo->url[strlen(ctx.repo->url) - 1] != '/')