From 0552ebe48385e203691b98c2bd12e166277cd43f Mon Sep 17 00:00:00 2001
From: Joe Orton <jorton@apache.org>
Date: Wed, 17 May 2006 14:23:41 +0000
Subject: [PATCH] * modules/generators/mod_autoindex.c (output_directories):
 Escape filename in non-FancyIndexing case.

PR: 38910
Submitted by: Robby Griffin <rmg terc.edu>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@407265 13f79535-47bb-0310-9956-ffa450edef68
---
 modules/generators/mod_autoindex.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/modules/generators/mod_autoindex.c b/modules/generators/mod_autoindex.c
index 5c7ad01afe1..0fbdf1ebb47 100644
--- a/modules/generators/mod_autoindex.c
+++ b/modules/generators/mod_autoindex.c
@@ -1819,8 +1819,9 @@ static void output_directories(struct ent **ar, int n,
             ap_rputc('\n', r);
         }
         else {
-            ap_rvputs(r, "<li><a href=\"", anchor, "\"> ", t2,
-                         "</a></li>\n", NULL);
+            ap_rvputs(r, "<li><a href=\"", anchor, "\"> ",
+                      ap_escape_html(scratch, t2),
+                      "</a></li>\n", NULL);
         }
     }
     if (autoindex_opts & TABLE_INDEXING) {
-- 
2.47.2