gitweb: escape link body in format_ref_marker

[Gitweb] / gitweb.perl

diff --git a/gitweb.perl b/gitweb.perl
index c19148234ff7ae0956589878b7c0755d53399961a72f4daf712bffd18e4555e6..a17455bb84567661ef2d63304f014d72ceb091a954861f20403d2f5ba93b2a72 100755 (executable)
--- a/gitweb.perl
+++ b/gitweb.perl
@@ -2091,7 +2091,7 @@ sub format_ref_marker {
                                -href => href(
                                        action=>$dest_action,
                                        hash=>$dest
-                               )}, $name);
+                               )}, esc_html($name));
 
                        $markers .= " <span class=\"".esc_attr($class)."\" title=\"".esc_attr($ref)."\">" .
                                $link . "</span>";