From: Stephen Boyd <bebarino@gmail.com>
Date: Sat, 14 Aug 2010 10:33:18 GMT
Subject: Re: gitweb not friendly to firefox revived
Message-ID: <4C6670EE.3060806@gmail.com>
In-Reply-To: <201008032350.40117.jnareb@gmail.com>

  On 08/03/2010 02:50 PM, Jakub Narebski wrote:
> +
> +	my $title = to_utf8("Search for commits $performed by $author");
> +	$title =~ s/[[:cntrl:]]/?/g;
> +
>

Isn't it possible that other data coming from git could have escape characters in them such as the commit subject line? In which case this same bug would occur?

Therefore isn't it better to strip out control characters (that's what this patch is doing right?) in esc_html?