ui-tag: escape tagnames properly

Signed-off-by: Lars Hjemli <hjemli@gmail.com>

1 file changed, 3 insertions, 2 deletions

diff --git a/ui-tag.c b/ui-tag.cindex 3aea87d..54b9f4c 100644--- a/ui-tag.c+++ b/ui-tag.c@@ -53,8 +53,9 @@ void cgit_print_tag(char *revname) 			return; 		} 		html("<table class='commit-info'>\n");-		htmlf("<tr><td>Tag name</td><td>%s (%s)</td></tr>\n",-		      revname, sha1_to_hex(sha1));+		htmlf("<tr><td>Tag name</td><td>");+		html_txt(revname);+		htmlf(" (%s)</td></tr>\n", sha1_to_hex(sha1)); 		if (info->tagger_date > 0) { 			html("<tr><td>Tag date</td><td>"); 			cgit_print_date(info->tagger_date, FMT_LONGDATE, ctx.cfg.local_time);
diff --git a/ui-tag.c b/ui-tag.c
index 3aea87d..54b9f4c 100644
--- a/ui-tag.c
+++ b/ui-tag.c
@@ -53,8 +53,9 @@ void cgit_print_tag(char *revname)
 			return;
 		}
 		html("<table class='commit-info'>\n");
-		htmlf("<tr><td>Tag name</td><td>%s (%s)</td></tr>\n",
-		      revname, sha1_to_hex(sha1));
+		htmlf("<tr><td>Tag name</td><td>");
+		html_txt(revname);
+		htmlf(" (%s)</td></tr>\n", sha1_to_hex(sha1));
 		if (info->tagger_date > 0) {
 			html("<tr><td>Tag date</td><td>");
 			cgit_print_date(info->tagger_date, FMT_LONGDATE, ctx.cfg.local_time);