cgit/html.c, branch v0.9.0.2

html.c: avoid out-of-bounds access for url_escape_table

2011-07-21T14:21:52Z

This fixes a segfault for me with with -O2 optimization on x86 with gcc (Debian 4.4.5-8) 4.4.5 I can reliably reproduce it with the following parameters when pointed to the git.git repository: PATH_INFO='/git-core.git/diff/' QUERY_STRING='id=2b93bfac0f5bcabbf60f174f4e7bfa9e318e64d5&id2=d6da71a9d16b8cf27f9d8f90692d3625c849cbc8' Signed-off-by: Eric Wong Signed-off-by: Lars Hjemli

Properly escape ampersands inside HTML attributes

2011-05-30T21:55:19Z

Ampersands ("&") appearing inside HTML attributes need to be translated to "&". Otherwise, invalid XHTML will be generated at various places, such as at tree views containing links to submodules. Signed-off-by: Lukas Fleischer Signed-off-by: Lars Hjemli

Fix memory leak in http_parse_querystring().

2011-05-23T20:58:35Z

Signed-off-by: Lukas Fleischer Signed-off-by: Lars Hjemli

Fix escaping of paths with spaces

2011-05-23T20:58:06Z

Signed-off-by: Lars Hjemli

Merge branch 'stable'

2011-03-05T13:01:59Z

do not infloop on a query ending in %XY, for invalid hex X or Y

2011-03-05T12:38:34Z

When a query ends in say %gg, (or any invalid hex) e.g., http://git.gnome.org/browse/gdlmm/commit/?id=%gg convert_query_hexchar calls memmove(txt, txt+3, 0), and then returns txt-1, so the loop in http_parse_querystring never terminates. The solution is to make the memmove also copy the trailing NUL. * html.c (convert_query_hexchar): Fix off-by-one error. Signed-off-by: Lars Hjemli

html.c: use '+' to escape spaces in urls

2010-11-09T23:22:41Z

Signed-off-by: Lars Hjemli

prefer html_raw() to write()

2010-09-04T18:30:10Z

To make the code more consistent, and to not rely on the implementation of html(), always use html_raw(...) instead of write(htmlfd, ...). Signed-off-by: Mark Lodato

Merge branch 'stable'

2010-08-29T15:40:51Z

html: fix strcpy bug in convert_query_hexchar

2010-08-29T15:27:40Z

The source and destination strings in strcpy() may not overlap. Instead, use memmove(), which allows overlap. This fixes test t0104, where 'url=foo%2bbar/tree' was being parsed improperly. Signed-off-by: Mark Lodato