diff options
author | Lars Hjemli <hjemli@gmail.com> | 2009-01-29 22:21:15 +0100 |
---|---|---|
committer | Lars Hjemli <hjemli@gmail.com> | 2009-01-29 22:21:15 +0100 |
commit | 7efcef00b5aadf22f5be80ecd7b736398cf7f6b4 (patch) | |
tree | 6bfdb7c5499ba43eb9b302394adc7bfa7e517436 /html.c | |
parent | ba75f6613ebce2d716334d912932f1bd78ef124f (diff) |
html.c: use correct escaping in html attributes
First, an apostrophe is not a quote. Second, we also need to escape
quotes. And finally, quotes are encoded as '"', not '"e;'.
Sighned-off-by: Lars Hjemli <hjemli@gmail.com>
Diffstat (limited to 'html.c')
-rw-r--r-- | html.c | 6 |
1 files changed, 4 insertions, 2 deletions
@@ -112,14 +112,16 @@ void html_attr(char *txt) char *t = txt; while(t && *t){ int c = *t; - if (c=='<' || c=='>' || c=='\'') { + if (c=='<' || c=='>' || c=='\'' || c=='\"') { write(htmlfd, txt, t - txt); if (c=='>') html(">"); else if (c=='<') html("<"); else if (c=='\'') - html(""e;"); + html("'"); + else if (c=='"') + html("""); txt = t+1; } t++; |