Re: gitweb not friendly to firefox revived
- From
Stephen Boyd <bebarino@gmail.com>
- Date
- Aug 14, 2010, 10:33 UTC
- Message-ID
- <4C6670EE.3060806@gmail.com>
- In-Reply-To
- <201008032350.40117.jnareb@gmail.com>
On 08/03/2010 02:50 PM, Jakub Narebski wrote:
Show 5 quoted lines
> +
> + my $title = to_utf8("Search for commits $performed by $author");
> + $title =~ s/[[:cntrl:]]/?/g;
> +
>Isn't it possible that other data coming from git could have escape characters in them such as the commit subject line? In which case this same bug would occur?
Therefore isn't it better to strip out control characters (that's what this patch is doing right?) in esc_html?