]> Lady’s Gitweb - Gitweb/commitdiff
gitweb: esc_html() site name for title in OPML
authorJürgen Kreileder <redacted>
Sat, 17 Dec 2011 09:22:22 +0000 (10:22 +0100)
committerLady <redacted>
Mon, 6 Apr 2026 04:51:31 +0000 (00:51 -0400)
This escapes the site name in OPML (XML uses the same escaping rules
as HTML).  Also fixes encoding issues because esc_html() uses
to_utf8().

Signed-off-by: Jürgen Kreileder <redacted>
Acked-by: Jakub Narębski <redacted>
Signed-off-by: Junio C Hamano <redacted>
gitweb.perl

index 33a89d57d8fcd00f4bd701b9f4c0a35d35be337285c0efde22bd71c2f992d54d..67b41e584f3120409e2cae97849549cf95caaa95c8d7dae3bf675aed05364389 100755 (executable)
@@ -7864,11 +7864,12 @@ sub git_opml {
                -charset => 'utf-8',
                -content_disposition => 'inline; filename="opml.xml"');
 
+       my $title = esc_html($site_name);
        print <<XML;
 <?xml version="1.0" encoding="utf-8"?>
 <opml version="1.0">
 <head>
-  <title>$site_name OPML Export</title>
+  <title>$title OPML Export</title>
 </head>
 <body>
 <outline text="git RSS feeds">
This page took 0.128297 seconds and 4 git commands to generate.