From: Don Armstrong <don@donarmstrong.com>
Date: Tue, 13 Nov 2007 05:39:53 +0000 (-0800)
Subject:  * Fix missing html_escape in cgi/pkgreport.cgi
X-Git-Tag: release/2.6.0~510^2~16
X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;h=b9700c637dc3764025b79a27505cae58672a7f0c;p=debbugs.git

 * Fix missing html_escape in cgi/pkgreport.cgi
---

diff --git a/cgi/pkgreport.cgi b/cgi/pkgreport.cgi
index 673a2db..78b4dc2 100755
--- a/cgi/pkgreport.cgi
+++ b/cgi/pkgreport.cgi
@@ -445,7 +445,7 @@ sub output_package_info{
 	 }
 	 if (defined $gSubscriptionDomain) {
 	      my $ptslink = $package ? $srcforpkg : $src;
-	      push @references, "to the <a href=\"http://$gSubscriptionDomain/$ptslink\">Package Tracking System</a>";
+	      push @references, q(to the <a href="http://).html_escape("$gSubscriptionDomain/$ptslink").q(">Package Tracking System</a>);
 	 }
 	 # Only output this if the source listing is non-trivial.
 	 if ($srcorbin eq 'binary' and $srcforpkg) {