From 84298cd109d6419321e4fa043442a46efea9f1fe Mon Sep 17 00:00:00 2001
From: "endico%mozilla.org" <>
Date: Fri, 9 Mar 2001 09:49:41 +0000
Subject: Patch from Jake <jake@acutex.net> for bugs 22041 and 25693 which had
 the same problem. HTML meta characters in the summary were not being quoted
 before being printed to html.

---
 duplicates.cgi | 1 +
 show_bug.cgi   | 1 +
 2 files changed, 2 insertions(+)

diff --git a/duplicates.cgi b/duplicates.cgi
index a45da6bb2..c9c692ca3 100755
--- a/duplicates.cgi
+++ b/duplicates.cgi
@@ -142,6 +142,7 @@ foreach (@sortedcount)
 	SendSQL("SELECT component, bug_severity, op_sys, target_milestone, short_desc FROM " . 
 												   "bugs WHERE bug_id = $id");
 	my ($component, $severity, $op_sys, $milestone, $summary) = FetchSQLData();
+        $summary = html_quote($summary);
 	print "<tr>";
 	print '<td><center><A HREF="show_bug.cgi?id=' . $id . '">';
 	print $id . "</A></center></td>";
diff --git a/show_bug.cgi b/show_bug.cgi
index 12a6755c7..1dd1f8820 100755
--- a/show_bug.cgi
+++ b/show_bug.cgi
@@ -50,6 +50,7 @@ GetVersionTable();
 SendSQL("select short_desc from bugs where bug_id = $::FORM{'id'}");
 my $summary = FetchOneColumn();
 if( $summary ) {
+    $summary = html_quote($summary);
     PutHeader("Bug $::FORM{'id'} - $summary", "Bugzilla Bug $::FORM{'id'}", $summary );
 }else {
     PutHeader("Bugzilla bug $::FORM{'id'}", "Bugzilla Bug", $::FORM{'id'});
-- 
cgit v1.2.3-24-g4f1b