* modules/generators/mod_autoindex.c (output_directories): Escape

filename in non-FancyIndexing case.

PR: 38910
Submitted by: Robby Griffin <rmg terc.edu>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@407265 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/modules/generators/mod_autoindex.c b/modules/generators/mod_autoindex.c
index 5c7ad01afe1a8e96d823a81a5fa33ec68c237e7c..0fbdf1ebb47b1a7e9ce0b8ddd229f1c2e10059f8 100644 (file)
--- a/modules/generators/mod_autoindex.c
+++ b/modules/generators/mod_autoindex.c
@@ -1819,8 +1819,9 @@ static void output_directories(struct ent **ar, int n,
             ap_rputc('\n', r);
         }
         else {
-            ap_rvputs(r, "<li><a href=\"", anchor, "\"> ", t2,
-                         "</a></li>\n", NULL);
+            ap_rvputs(r, "<li><a href=\"", anchor, "\"> ",
+                      ap_escape_html(scratch, t2),
+                      "</a></li>\n", NULL);
         }
     }
     if (autoindex_opts & TABLE_INDEXING) {