From: Michael M Slusarz <slusarz@curecanti.org>
Date: Thu, 29 Jan 2009 21:05:53 +0000 (-0700)
Subject: Escape special characters in author name.
X-Git-Url: https://git.internetallee.de/?a=commitdiff_plain;h=a106d34306dadaad059e3e6c0c7401f6bf30e527;p=horde.git

Escape special characters in author name.
---

diff --git a/chora/templates/stats/stats.inc b/chora/templates/stats/stats.inc
index a48084730..d2184295b 100644
--- a/chora/templates/stats/stats.inc
+++ b/chora/templates/stats/stats.inc
@@ -12,7 +12,7 @@ $most = max($stats);
 $factor = $most / 400;
 foreach ($stats as $author => $commits): $width = (int)($commits / $factor); ?>
  <tr>
-  <td class="rightAlign"><?php echo $author ?>&nbsp;&nbsp;</td>
+  <td class="rightAlign"><?php echo htmlspecialchars($author) ?>&nbsp;&nbsp;</td>
   <td><?php echo Horde::img('pixel.php?c=bbcbff', '', 'id="statsImg" width="' . $width . '" height="10"', $registry->get('webroot', 'horde') . '/services/images') . ' (' . $commits . ')</td>' ?>
  </tr>
 <?php endforeach ?>