threads / patch / 29046

patchgitweb: esc_html() site name for title in OPML

Subject: [PATCH] gitweb: esc_html() site name for title in OPML

## tl;dr

One message between Nov 29, 2011 and Nov 29, 2011. Diffs are folded; open one to read it.

replies: 0people: 1as markdown or json

Jürgen Kreileder· Nov 29, 2011, 21:45 UTC · lore

This escapes the site name in OPML. Also fixes encoding issues because esc_html() uses to_utf().

Signed-off-by: Jürgen Kreileder <jk@blackdown.de>
---
 gitweb/gitweb.perl |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)
Show changes to gitweb/gitweb.perl +2 −1
diff --git a/gitweb/gitweb.perl b/gitweb/gitweb.perl
index 4f0c3bd..df747c1 100755
--- a/gitweb/gitweb.perl
+++ b/gitweb/gitweb.perl
@@ -7699,11 +7699,12 @@ sub git_opml {
 		-charset => 'utf-8',
 		-content_disposition => 'inline; filename="opml.xml"');

+	my $title = esc_html($site_name);
 	print <<XML;
 <?xml version="1.0" encoding="utf-8"?>
 <opml version="1.0">
 <head>
-  <title>$site_name OPML Export</title>
+  <title>$title OPML Export</title>
 </head>
 <body>
 <outline text="git RSS feeds">
-- 
1.7.5.4

← back to recent threads