gitweb: esc_html() author in blame

Blame fails for example on
block/ll_rw_blk.c at v2.6.19-rc3.

Signed-off-by: Luben Tuikov <redacted>
Signed-off-by: Junio C Hamano <redacted>

diff --git a/gitweb.perl b/gitweb.perl
index 71d661ae5c5b2b5cc045f86983db40c9c0b59203053343245f3ce004674179df..0abc0b90d414fe114144c91d2747a801967d33b2f3b795185f5d52c2a991af49 100755 (executable)
--- a/gitweb.perl
+++ b/gitweb.perl
@@ -2752,7 +2752,7 @@ HTML
                print "<tr class=\"$rev_color[$current_color]\">\n";
                if ($group_size) {
                        print "<td class=\"sha1\"";
-                       print " title=\"$author, $date\"";
+                       print " title=\"". esc_html($author) . ", $date\"";
                        print " rowspan=\"$group_size\"" if ($group_size > 1);
                        print ">";
                        print $cgi->a({-href => href(action=>"commit",