From: Junio C Hamano <gitster@pobox.com>
Date: Sun, 1 Dec 2019 17:04:41 +0000 (-0800)
Subject: Merge branch 'jk/gitweb-anti-xss'
X-Git-Tag: v2.25.0-rc0~91
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6c630f237e72d3adef8a089bdf984ec1e47b2708;p=thirdparty%2Fgit.git

Merge branch 'jk/gitweb-anti-xss'

Some codepaths in "gitweb" that forgot to escape URLs generated
based on end-user input have been corrected.

* jk/gitweb-anti-xss:
  gitweb: escape URLs generated by href()
  t/gitweb-lib.sh: set $REQUEST_URI
  t/gitweb-lib.sh: drop confusing quotes
  t9502: pass along all arguments in xss helper
---

6c630f237e72d3adef8a089bdf984ec1e47b2708