PR#2747: Escape vcs and disturl

Merges #2747
https://pagure.io/koji/pull-request/2747

Fixes: #2746
https://pagure.io/koji/issue/2746
VCS and DistURL not escaped
This commit is contained in:
Tomas Kopecek 2021-03-10 16:29:27 +01:00
commit 566c70701e
2 changed files with 4 additions and 4 deletions

View file

@ -52,12 +52,12 @@
#end if
#if $vcs
<tr>
<th><label title="Package source code VCS location">VCS</label></th><td>$vcs</td>
<th><label title="Package source code VCS location">VCS</label></th><td>$util.escapeHTML($vcs)</td>
</tr>
#end if
#if $disturl
<tr>
<th>DistURL</th><td>$disturl</td>
<th>DistURL</th><td>$util.escapeHTML($disturl)</td>
</tr>
#end if
<tr>

View file

@ -70,12 +70,12 @@
</tr>
#if $vcs
<tr>
<th><label title="Package source code VCS location">VCS</label></th><td>$vcs</td>
<th><label title="Package source code VCS location">VCS</label></th><td>$util.escapeHTML($vcs)</td>
</tr>
#end if
#if $disturl
<tr>
<th>DistURL</th><td>$disturl</td>
<th>DistURL</th><td>$util.escapeHTML($disturl)</td>
</tr>
#end if
#end if