From: mkanat%bugzilla.org <>
Date: Wed, 26 Nov 2008 00:56:34 +0000 (+0000)
Subject: Bug 466398: <select> is not escaped in the API documentation
X-Git-Tag: bugzilla-3.2~5
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9917113cfb1c806248f51f4ea2d5f601d0e2d095;p=thirdparty%2Fbugzilla.git

Bug 466398: <select> is not escaped in the API documentation
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=mkanat
---

diff --git a/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm b/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm
index c0a70fa575..ab298a05b7 100644
--- a/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm
+++ b/docs/lib/Pod/Simple/HTMLBatch/Bugzilla.pm
@@ -71,6 +71,7 @@ sub _write_contents_middle {
             my $path = join( "/", '.', esc(@{$e->[3]}) )
                . $Pod::Simple::HTML::HTML_EXTENSION;
             my $description = $self->{bugzilla_desc}->{$name} || '';
+            $description = esc($description);
             my $html = <<END_HTML;
 <tr class="$even_or_odd">
   <th><a href="$path">$name</a></th>