Log Message: ----------- Partial merge of rev. 3.119.2.15; the rest will be fixed differently because the original diff caused regressions. Original commit message: Patch from Peter J. Philipp <pjp at centroid dot eu> to fix some opportunities for XSS; triggered by a report from Ezio Paglia. Modified Files: -------------- cvsweb: cvsweb.cgi Revision Data ------------- Index: cvsweb.cgi =================================================================== RCS file: /home/cvs/mandoc/cvsweb/cvsweb.cgi,v retrieving revision 4.6 retrieving revision 4.7 diff -Lcvsweb.cgi -Lcvsweb.cgi -u -p -r4.6 -r4.7 --- cvsweb.cgi +++ cvsweb.cgi @@ -4194,6 +4194,7 @@ sub htmlquote($) # Special Characters; RFC 1866 s/&/&/g; s/\"/"/g; + s/%22/"/g; s/</</g; s/>/>/g; return $_; -- To unsubscribe send an email to source+unsubscribe@mandoc.bsd.lv