From b9700c637dc3764025b79a27505cae58672a7f0c Mon Sep 17 00:00:00 2001
From: Don Armstrong <don@donarmstrong.com>
Date: Mon, 12 Nov 2007 21:39:53 -0800
Subject: [PATCH]  * Fix missing html_escape in cgi/pkgreport.cgi

---
 cgi/pkgreport.cgi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cgi/pkgreport.cgi b/cgi/pkgreport.cgi
index 673a2db..78b4dc2 100755
--- a/cgi/pkgreport.cgi
+++ b/cgi/pkgreport.cgi
@@ -445,7 +445,7 @@ sub output_package_info{
 	 }
 	 if (defined $gSubscriptionDomain) {
 	      my $ptslink = $package ? $srcforpkg : $src;
-	      push @references, "to the <a href=\"http://$gSubscriptionDomain/$ptslink\">Package Tracking System</a>";
+	      push @references, q(to the <a href="http://).html_escape("$gSubscriptionDomain/$ptslink").q(">Package Tracking System</a>);
 	 }
 	 # Only output this if the source listing is non-trivial.
 	 if ($srcorbin eq 'binary' and $srcforpkg) {
-- 
2.39.2