• Junio C Hamano's avatar
    Merge branch 'jk/gitweb-anti-xss' · 6c630f23
    Junio C Hamano authored
    Some codepaths in "gitweb" that forgot to escape URLs generated
    based on end-user input have been corrected.
    
    * jk/gitweb-anti-xss:
      gitweb: escape URLs generated by href()
      t/gitweb-lib.sh: set $REQUEST_URI
      t/gitweb-lib.sh: drop confusing quotes
      t9502: pass along all arguments in xss helper
    6c630f23
gitweb.perl 247 KB