diff options
| author | Petr Baudis <pasky@suse.cz> | 2006-09-23 22:18:41 (GMT) |
|---|---|---|
| committer | Junio C Hamano <junkio@cox.net> | 2006-09-24 06:53:18 (GMT) |
| commit | a2f3db2f5de2a3667b0e038aa65e3e097e642e7d (patch) | |
| tree | 521959c2df89fa89837b1dafdf5a158525fcb885 /builtin-upload-archive.c | |
| parent | 8f41db8c370d535ed0132ef33d73e47edcc5af03 (diff) | |
| download | git-a2f3db2f5de2a3667b0e038aa65e3e097e642e7d.zip git-a2f3db2f5de2a3667b0e038aa65e3e097e642e7d.tar.gz git-a2f3db2f5de2a3667b0e038aa65e3e097e642e7d.tar.bz2 | |
gitweb: Consolidate escaping/validation of query string
Consider:
http://repo.or.cz/?p=glibc-cvs.git;a=tree;h=2609cb0411389325f4ee2854cc7159756eb0671e;hb=2609cb0411389325f4ee2854cc7159756eb0671e
(click on the funny =__ify file)
We ought to handle anything in filenames and I actually see no reason why
we don't, modulo very little missing escaping that this patch hopefully
also fixes.
I have also made esc_param() escape [?=&;]. Not escaping [&;] was downright
buggy and [?=] just feels better escaped. ;-) YMMV.
Signed-off-by: Petr Baudis <pasky@suse.cz>
Signed-off-by: Junio C Hamano <junkio@cox.net>
Diffstat (limited to 'builtin-upload-archive.c')
0 files changed, 0 insertions, 0 deletions