]> Sergey Matveev's repositories - public-inbox.git/commitdiff
viewdiff: escape HTML ampersand for renames
authorEric Wong <e@80x24.org>
Fri, 1 Feb 2019 06:30:17 +0000 (06:30 +0000)
committerEric Wong <e@80x24.org>
Fri, 1 Feb 2019 07:40:15 +0000 (07:40 +0000)
For URLs we generate, we need to escape '&' in query parameters
for correctness.

lib/PublicInbox/ViewDiff.pm

index 2074e12fffbd01a5deb6ffd955849e7aaafd185d..fbdc5b951e73e691bf2d37f445da1977efd8decf 100644 (file)
@@ -133,8 +133,8 @@ sub flush_diff ($$$) {
                                        Q => "?b=".uri_escape_utf8($pb, UNSAFE),
                                };
                                if ($pa ne $pb) {
-                                       $dctx->{Q} .=
-                                            "&a=".uri_escape_utf8($pa, UNSAFE);
+                                       $dctx->{Q} .= '&amp;a='.
+                                               uri_escape_utf8($pa, UNSAFE);
                                }
                                anchor1($dst, $ctx, $linkify, $pb, $s) and next;
                        }