Bug 466398: <select> is not escaped in the API documentation

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat

diff --git a/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm b/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm
index c0a70fa5750d987a96007f709f907af8be3240f6..ab298a05b7075426e2f8677938d6778762316980 100644 (file)
--- a/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm
+++ b/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm
@@ -71,6 +71,7 @@ sub _write_contents_middle {
             my $path = join( "/", '.', esc(@{$e->[3]}) )
                . $Pod::Simple::HTML::HTML_EXTENSION;
             my $description = $self->{bugzilla_desc}->{$name} || '';
+            $description = esc($description);
             my $html = <<END_HTML;
 <tr class="$even_or_odd">
   <th><a href="$path">$name</a></th>