From 38301f0f207f93c33e6a8e365f0f2fd04f26f380 Mon Sep 17 00:00:00 2001
From: markt <markt@13f79535-47bb-0310-9956-ffa450edef68>
Date: Mon, 20 Nov 2006 00:17:55 +0000
Subject: [PATCH] Port fix for bug 40901. Encode directory listing output.
 Based on a patch by Chris Halstead.

git-svn-id: https://svn.apache.org/repos/asf/tomcat/tc6.0.x/trunk@476992 13f79535-47bb-0310-9956-ffa450edef68
---
 java/org/apache/catalina/servlets/DefaultServlet.java | 5 +++--
 webapps/docs/changelog.xml                            | 4 ++++
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/java/org/apache/catalina/servlets/DefaultServlet.java b/java/org/apache/catalina/servlets/DefaultServlet.java
index 46bb7e8fe..8afbaafc2 100644
--- a/java/org/apache/catalina/servlets/DefaultServlet.java
+++ b/java/org/apache/catalina/servlets/DefaultServlet.java
@@ -56,6 +56,7 @@ import javax.xml.transform.stream.StreamResult;
 import javax.xml.transform.stream.StreamSource;
 
 import org.apache.catalina.Globals;
+import org.apache.catalina.util.RequestUtil;
 import org.apache.catalina.util.ServerInfo;
 import org.apache.catalina.util.StringManager;
 import org.apache.catalina.util.URLEncoder;
@@ -1171,7 +1172,7 @@ public class DefaultServlet
                   .append("'");
 
                 sb.append(">");
-                sb.append(trimmed);
+                sb.append(RequestUtil.filter(trimmed));
                 if (childCacheEntry.context != null)
                     sb.append("/");
                 sb.append("</entry>");
@@ -1333,7 +1334,7 @@ public class DefaultServlet
                 if (childCacheEntry.context != null)
                     sb.append("/");
                 sb.append("\"><tt>");
-                sb.append(trimmed);
+                sb.append(RequestUtil.filter(trimmed));
                 if (childCacheEntry.context != null)
                     sb.append("/");
                 sb.append("</tt></a></td>\r\n");
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 9c9eec934..736332fde 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -28,6 +28,10 @@
       <fix>
         <bug>40844</bug> Missing syncs in JDBCRealm. (markt)
       </fix>
+       <fix>
+        <bug>40901</bug>: Encode directory listing output. Based on a patch
+        provided by Chris Halstead. (markt)
+      </fix>
       <fix>
         <bug>40929</bug>: Correct JavaDoc for StandardClassLoader. (markt)
         (markt)
-- 
2.11.0