[project @ 2001-11-17 06:35:13 by doogie]

Don't escape "&" in urlsanit.

diff --git a/cgi/common.pl b/cgi/common.pl
index 9f6d13c63096076618fefedc523d8dd750066e3f..626be400ddb88030770f00118b4878b1b82ffb48 100644 (file)
--- a/cgi/common.pl
+++ b/cgi/common.pl
@@ -172,7 +172,14 @@ sub urlsanit {
     my $url = shift;
     $url =~ s/%/%25/g;
     $url =~ s/\+/%2b/g;
-    return htmlsanit($url);
+    my %saniarray = ('<','lt', '>','gt', '"','quot');
+    my $out;
+    while ($url =~ m/[<>"]/) {
+        $out .= $`. '&'. $saniarray{$&}. ';';
+        $url = $';
+    }
+    $out .= $url;
+    return $out;
 }
 
 sub htmlsanit {