From 84298cd109d6419321e4fa043442a46efea9f1fe Mon Sep 17 00:00:00 2001 From: "endico%mozilla.org" <> Date: Fri, 9 Mar 2001 09:49:41 +0000 Subject: Patch from Jake for bugs 22041 and 25693 which had the same problem. HTML meta characters in the summary were not being quoted before being printed to html. --- duplicates.cgi | 1 + show_bug.cgi | 1 + 2 files changed, 2 insertions(+) diff --git a/duplicates.cgi b/duplicates.cgi index a45da6bb2..c9c692ca3 100755 --- a/duplicates.cgi +++ b/duplicates.cgi @@ -142,6 +142,7 @@ foreach (@sortedcount) SendSQL("SELECT component, bug_severity, op_sys, target_milestone, short_desc FROM " . "bugs WHERE bug_id = $id"); my ($component, $severity, $op_sys, $milestone, $summary) = FetchSQLData(); + $summary = html_quote($summary); print ""; print '
'; print $id . "
"; diff --git a/show_bug.cgi b/show_bug.cgi index 12a6755c7..1dd1f8820 100755 --- a/show_bug.cgi +++ b/show_bug.cgi @@ -50,6 +50,7 @@ GetVersionTable(); SendSQL("select short_desc from bugs where bug_id = $::FORM{'id'}"); my $summary = FetchOneColumn(); if( $summary ) { + $summary = html_quote($summary); PutHeader("Bug $::FORM{'id'} - $summary", "Bugzilla Bug $::FORM{'id'}", $summary ); }else { PutHeader("Bugzilla bug $::FORM{'id'}", "Bugzilla Bug", $::FORM{'id'}); -- cgit v1.2.1