changeset 19879:5cbf413ce658 stable

hgweb: escape branch names in graph view
author Matt Mackall <mpm@selenic.com>
date Mon, 07 Oct 2013 15:21:17 -0700
parents 21de61bc2ab5
children ba2be32d14f2
files mercurial/hgweb/webcommands.py
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/mercurial/hgweb/webcommands.py	Wed Oct 02 11:16:03 2013 +0200
+++ b/mercurial/hgweb/webcommands.py	Mon Oct 07 15:21:17 2013 -0700
@@ -913,7 +913,7 @@
             desc = templatefilters.firstline(ctx.description())
             desc = cgi.escape(templatefilters.nonempty(desc))
             user = cgi.escape(templatefilters.person(ctx.user()))
-            branch = ctx.branch()
+            branch = cgi.escape(ctx.branch())
             try:
                 branchnode = web.repo.branchtip(branch)
             except error.RepoLookupError: