From a106d34306dadaad059e3e6c0c7401f6bf30e527 Mon Sep 17 00:00:00 2001
From: Michael M Slusarz <slusarz@curecanti.org>
Date: Thu, 29 Jan 2009 14:05:53 -0700
Subject: [PATCH] Escape special characters in author name.

---
 chora/templates/stats/stats.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/chora/templates/stats/stats.inc b/chora/templates/stats/stats.inc
index a48084730..d2184295b 100644
--- a/chora/templates/stats/stats.inc
+++ b/chora/templates/stats/stats.inc
@@ -12,7 +12,7 @@ $most = max($stats);
 $factor = $most / 400;
 foreach ($stats as $author => $commits): $width = (int)($commits / $factor); ?>
  <tr>
-  <td class="rightAlign"><?php echo $author ?>&nbsp;&nbsp;</td>
+  <td class="rightAlign"><?php echo htmlspecialchars($author) ?>&nbsp;&nbsp;</td>
   <td><?php echo Horde::img('pixel.php?c=bbcbff', '', 'id="statsImg" width="' . $width . '" height="10"', $registry->get('webroot', 'horde') . '/services/images') . ' (' . $commits . ')</td>' ?>
  </tr>
 <?php endforeach ?>
-- 
2.11.0