gitweb: esc_html() site name for title in OPML
This escapes the site name in OPML (XML uses the same escaping rules as HTML). Also fixes encoding issues because esc_html() uses to_utf8(). Signed-off-by: Jürgen Kreileder <jk@blackdown.de> Acked-by: Jakub Narębski <jnareb@gmail.com> Signed-off-by: Junio C Hamano <gitster@pobox.com>
Jürgen Kreileder committed
Dec 17, 2011 at 10:22 UTC
5d7910569b2caeb65354d17b26359cb235026b39
1 file changed
+2
-1
gitweb/gitweb.perl
+2
-1
@@ -7700,11 +7700,12 @@ sub git_opml {
7700
-charset => 'utf-8',
7701
-content_disposition => 'inline; filename="opml.xml"');
7702
7703
+ my $title = esc_html($site_name);
7704
print <<XML;
7705
<?xml version="1.0" encoding="utf-8"?>
7706
<opml version="1.0">
7707
<head>
7707
- <title>$site_name OPML Export</title>
7708
+ <title>$title OPML Export</title>
7709
</head>
7710
<body>
7711
<outline text="git RSS feeds">