Bug 466398: <select> is not escaped in the API documentation

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat

diff --git a/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm b/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm
index 06c76c678b85eddcf690980a8ad09002ae1cd425..56896a9b747f1187b34c7470a7c34b46e3c18dbc 100644 (file)
--- a/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm
+++ b/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm
@@ -70,6 +70,7 @@ sub _write_contents_middle {
             my $path = join( "/", '.', esc(@{$e->[3]}) )
                . $Pod::Simple::HTML::HTML_EXTENSION;
             my $description = $self->{bugzilla_desc}->{$name} || '';
+            $description = esc($description);
             my $html = <<END_HTML;
 <tr class="$even_or_odd">
   <th><a href="$path">$name</a></th>