diff options
| author | Petr Baudis <pasky@suse.cz> | 2006-09-24 00:18:41 +0200 |
|---|---|---|
| committer | Junio C Hamano <junkio@cox.net> | 2006-09-23 23:53:18 -0700 |
| commit | a2f3db2f5de2a3667b0e038aa65e3e097e642e7d (patch) | |
| tree | 521959c2df89fa89837b1dafdf5a158525fcb885 /diffcore-order.c | |
| parent | 8f41db8c370d535ed0132ef33d73e47edcc5af03 (diff) | |
| download | git-a2f3db2f5de2a3667b0e038aa65e3e097e642e7d.tar.gz git-a2f3db2f5de2a3667b0e038aa65e3e097e642e7d.tar.xz | |
gitweb: Consolidate escaping/validation of query string
Consider:
http://repo.or.cz/?p=glibc-cvs.git;a=tree;h=2609cb0411389325f4ee2854cc7159756eb0671e;hb=2609cb0411389325f4ee2854cc7159756eb0671e
(click on the funny =__ify file)
We ought to handle anything in filenames and I actually see no reason why
we don't, modulo very little missing escaping that this patch hopefully
also fixes.
I have also made esc_param() escape [?=&;]. Not escaping [&;] was downright
buggy and [?=] just feels better escaped. ;-) YMMV.
Signed-off-by: Petr Baudis <pasky@suse.cz>
Signed-off-by: Junio C Hamano <junkio@cox.net>
Diffstat (limited to 'diffcore-order.c')
0 files changed, 0 insertions, 0 deletions