Double quotes in man.cgi search output

Double quotes in man.cgi search output

[Anthony J. Bentley]

Hi,

html_putchar() escapes double quotes incorrectly: the entity should be
", not &quote;.

https://www.w3.org/TR/html5/syntax.html#named-character-references

For example:

http://man.openbsd.org/?query=Nd~%22&apropos=1

In Firefox, each &quote; is rendered as: "e;
because Firefox believes what the author meant to write was "e;

Index: cgi.c
===================================================================
RCS file: /cvs/src/usr.bin/mandoc/cgi.c,v
retrieving revision 1.77
diff -u -p -r1.77 cgi.c
--- cgi.c	18 Aug 2016 00:44:37 -0000	1.77
+++ cgi.c	30 Aug 2016 07:34:28 -0000
@@ -136,7 +136,7 @@ html_putchar(char c)
 
 	switch (c) {
 	case ('"'):
-		printf("&quote;");
+		printf(""");
 		break;
 	case ('&'):
 		printf("&");
--
 To unsubscribe send an email to tech+unsubscribe@mdocml.bsd.lv

Re: Double quotes in man.cgi search output

[Ingo Schwarze]

Hi Anthony,

Anthony J. Bentley wrote on Tue, Aug 30, 2016 at 01:43:59AM -0600:

> html_putchar() escapes double quotes incorrectly: the entity should be
> ", not &quote;.
> 
> https://www.w3.org/TR/html5/syntax.html#named-character-references
> 
> For example:
> 
> http://man.openbsd.org/?query=Nd~%22&apropos=1
> 
> In Firefox, each &quote; is rendered as: "e;
> because Firefox believes what the author meant to write was "e;

OK schwarze@
  Ingo

> Index: cgi.c
> ===================================================================
> RCS file: /cvs/src/usr.bin/mandoc/cgi.c,v
> retrieving revision 1.77
> diff -u -p -r1.77 cgi.c
> --- cgi.c	18 Aug 2016 00:44:37 -0000	1.77
> +++ cgi.c	30 Aug 2016 07:34:28 -0000
> @@ -136,7 +136,7 @@ html_putchar(char c)
>  
>  	switch (c) {
>  	case ('"'):
> -		printf("&quote;");
> +		printf(""");
>  		break;
>  	case ('&'):
>  		printf("&");
--
 To unsubscribe send an email to tech+unsubscribe@mdocml.bsd.lv