From f208e298e2ac9836c8138449a0691f6deb850c4a Mon Sep 17 00:00:00 2001 From: "justdave%syndicomm.com" <> Date: Wed, 4 Jul 2001 14:05:59 +0000 Subject: Fix for bug 87701: Invalid username in bug changes echoed back without escaping HTML data Patch by Gervase Markham r= justdave@syndicomm.com --- globals.pl | 1 + 1 file changed, 1 insertion(+) (limited to 'globals.pl') diff --git a/globals.pl b/globals.pl index 81efb4745..736cb431a 100644 --- a/globals.pl +++ b/globals.pl @@ -695,6 +695,7 @@ sub DBname_to_id { sub DBNameToIdAndCheck { my ($name, $forceok) = (@_); + $name = html_quote($name); my $result = DBname_to_id($name); if ($result > 0) { return $result; -- cgit v1.2.3-24-g4f1b