From: Junio C Hamano Date: Wed, 07 Mar 2007 00:49:16 GMT Subject: Re: [PATCH] gitweb: Change to use explicitly function call cgi->escapHTML() Message-ID: <7vvehdnaib.fsf@assigned-by-dhcp.cox.net> In-Reply-To: <200703070137.07477.jnareb@gmail.com> Jakub Narebski writes: > In short: escape tag contents if needed, do not escape attrbure values. I trust a patch from you will follow shortly?