Fix bug 146447, part 2

r=gerv, mattyt, jaypee

diff --git a/bug_form.pl b/bug_form.pl
index 016dac92fedf097ad9cc49597b1ba4a7a4c95001..1100ba9b047c7f593486c8562b261a73433cb1b0 100644 (file)
--- a/bug_form.pl
+++ b/bug_form.pl
@@ -243,7 +243,7 @@ print "
 </TR><TR>
     <TD ALIGN=RIGHT><B><A HREF=\"bug_status.html#assigned_to\">Assigned&nbsp;To:
         </A></B></TD>
-      <TD>$bug{'assigned_to'}</TD>
+      <TD>" . html_quote($bug{'assigned_to'}) . "</TD>
   <TD>&nbsp;</TD>";
 
 if (Param("usetargetmilestone")) {

diff --git a/globals.pl b/globals.pl
index cf273e8247c367433dc9dcafe438908e6eae7945..b03293adc5b1d82638a1d8f7634183b75169d31f 100644 (file)
--- a/globals.pl
+++ b/globals.pl
@@ -1058,7 +1058,7 @@ sub GetLongDescriptionAsHTML {
         if ($count) {
             $result .= "<BR><BR><I>------- Additional Comments From ";
               if ($who) {
-                  $result .= qq{<A HREF="mailto:$email">$who</A> } .
+                  $result .= "<A HREF=\"mailto:$email\">" . html_quote($who) . "</A> " .
                       time2str("%Y-%m-%d %H:%M", str2time($when)) .
                           " -------</I><BR>\n";
               } else {