From: doogie <>
Date: Sat, 17 Nov 2001 14:35:13 +0000 (-0800)
Subject: [project @ 2001-11-17 06:35:13 by doogie]
X-Git-Tag: release/2.6.0~1090
X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;h=76d6901eb2e6cfe930d2686d86bd5089e525e8b6;p=debbugs.git

[project @ 2001-11-17 06:35:13 by doogie]
Don't escape "&" in urlsanit.
---

diff --git a/cgi/common.pl b/cgi/common.pl
index 9f6d13c..626be40 100644
--- a/cgi/common.pl
+++ b/cgi/common.pl
@@ -172,7 +172,14 @@ sub urlsanit {
     my $url = shift;
     $url =~ s/%/%25/g;
     $url =~ s/\+/%2b/g;
-    return htmlsanit($url);
+    my %saniarray = ('<','lt', '>','gt', '"','quot');
+    my $out;
+    while ($url =~ m/[<>"]/) {
+        $out .= $`. '&'. $saniarray{$&}. ';';
+        $url = $';
+    }
+    $out .= $url;
+    return $out;
 }
 
 sub htmlsanit {