From: Don Armstrong Date: Thu, 6 Nov 2014 04:26:32 +0000 (-0800) Subject: Stop URLs at " too. Thanks to Vincent Lefevre (Closes: #766354). X-Git-Tag: release/2.6.0~243^2~9 X-Git-Url: https://git.donarmstrong.com/?p=debbugs.git;a=commitdiff_plain;h=4c244879af2b9e8c0055968d7ffb054646cb7607 Stop URLs at " too. Thanks to Vincent Lefevre (Closes: #766354). --- diff --git a/Debbugs/CGI/Bugreport.pm b/Debbugs/CGI/Bugreport.pm index d085ed4..00619fc 100644 --- a/Debbugs/CGI/Bugreport.pm +++ b/Debbugs/CGI/Bugreport.pm @@ -271,7 +271,7 @@ sub display_entity { # We don't html escape here because we escape above; # wierd terminators are because of that $body =~ s{((?:ftp|http|https|svn|ftps|rsync)://[\S~-]+?/?) # Url - ((?:\>\;)?[)]?(?:'|\&\#39\;)?[:.\,]?(?:\s|$)) # terminators + ((?:\>\;)?[)]?(?:'|\&\#39\;|\"\;)?[:.\,]?(?:\s|$)) # terminators }{$1$2}gox; # Add links to bug closures $body =~ s[((?:closes|see):\s* # start of closed/referenced bugs diff --git a/debian/changelog b/debian/changelog index 7f8ef53..24d2014 100644 --- a/debian/changelog +++ b/debian/changelog @@ -27,6 +27,7 @@ debbugs (2.4.2~exp2) UNRELEASED; urgency=low #412815). Thanks to martin krafft, Paul Wise, and Julien Valroff. * Fix XSS in version.cgi, thanks to Vlad Constantin (Closes: #762967). * Add affects to bugreport.cgi package info header (Closes: #609687). + * Stop URLs at " too. Thanks to Vincent Lefevre (Closes: #766354). [Thanks to Arnout Engelen: ] * Add Homepage (closes: #670555).