Patch from Jake <jake@acutex.net> for bugs 22041 and 25693 which had the same problem...

diff --git a/duplicates.cgi b/duplicates.cgi
index a45da6bb2a2a3fffd9afcd03ced2cdafef59bd9f..c9c692ca3c0d5d20349e583bbabbcf948bf11619 100755 (executable)
--- a/duplicates.cgi
+++ b/duplicates.cgi
@@ -142,6 +142,7 @@ foreach (@sortedcount)
        SendSQL("SELECT component, bug_severity, op_sys, target_milestone, short_desc FROM " . 
                                                                                                   "bugs WHERE bug_id = $id");
        my ($component, $severity, $op_sys, $milestone, $summary) = FetchSQLData();
+        $summary = html_quote($summary);
        print "<tr>";
        print '<td><center><A HREF="show_bug.cgi?id=' . $id . '">';
        print $id . "</A></center></td>";

diff --git a/show_bug.cgi b/show_bug.cgi
index 12a6755c72401e09ffef7ad6ba09e581a6db49ca..1dd1f882015d4454cbcf39c84623b0108e38e38a 100755 (executable)
--- a/show_bug.cgi
+++ b/show_bug.cgi
@@ -50,6 +50,7 @@ GetVersionTable();
 SendSQL("select short_desc from bugs where bug_id = $::FORM{'id'}");
 my $summary = FetchOneColumn();
 if( $summary ) {
+    $summary = html_quote($summary);
     PutHeader("Bug $::FORM{'id'} - $summary", "Bugzilla Bug $::FORM{'id'}", $summary );
 }else {
     PutHeader("Bugzilla bug $::FORM{'id'}", "Bugzilla Bug", $::FORM{'id'});