Re: [PATCH] gitweb: escape link body in format_ref_marker

On Mon, Aug 1, 2016 at 9:54 PM, Junio C Hamano wrote: > Jakub Narębski writes: > >> Good catch! >> >> Acked-by: Jakub Narębski > > Sigh; the contents may be good but the patch is unusable as-is > because of heavy whitespace damage. > > I'll fix it up. Thanks, both. My apologies for that, it see

[PATCH] gitweb: escape link body in format_ref_marker

Fix a case where an html link can be generated from unescaped input resulting in invalid strict xhtml or potentially injected code. An overview of a repo with a tag "1.0.0&0.0.1" would previously result in an unescaped amperstand in the link body. Signed-off-by: Andreas Brauchl