From: Jeff King Date: Tue, 06 Mar 2007 11:01:56 GMT Subject: Re: [PATCH] gitweb: Change to use explicitly function call cgi->escapHTML() Message-ID: <20070306110156.GA13380@coredump.intra.peff.net> In-Reply-To: <7vps7mprj6.fsf@assigned-by-dhcp.cox.net> On Tue, Mar 06, 2007 at 02:58:37AM -0800, Junio C Hamano wrote: > Sorry, what I meant to say was on top of Li's patch. Ah, I understand your point now. Yes, if other mod_perl CGIs can impact the value, then we should definitely set it explicitly, as per your patch (and we should use Li's patch for safety, then, not mine). -Peff