view: HTML escape mailto: link

[public-inbox.git] / lib / PublicInbox / View.pm

diff --git a/lib/PublicInbox/View.pm b/lib/PublicInbox/View.pm
index 5dd586c9a2feaa276dc44b1a7af3f5d20db2f998..30339cd4cff30f74deb6fed16d3de09256c5848a 100644 (file)
--- a/lib/PublicInbox/View.pm
+++ b/lib/PublicInbox/View.pm
@@ -496,7 +496,7 @@ sub mailto_arg_link {
        my $href = "mailto:$to?In-Reply-To=$irt&Cc=${cc}&Subject=$subj";
        $href =~ s/%20/+/g;
 
-       (\@arg, $href);
+       (\@arg, ascii_html($href));
 }
 
 sub html_footer {