From: joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071>
Date: Mon, 4 Sep 2006 04:31:41 +0000 (+0000)
Subject: close a possible XSS hole
X-Git-Url: https://scripts.mit.edu/gitweb/www/ikiwiki.git/commitdiff_plain/9926ecf39c40c06f5084f34f7ad2427b56311fb2

close a possible XSS hole
---

diff --git a/templates/recentchanges.tmpl b/templates/recentchanges.tmpl
index 726e52f64..f927cf62f 100644
--- a/templates/recentchanges.tmpl
+++ b/templates/recentchanges.tmpl
@@ -30,7 +30,7 @@
 <TMPL_LOOP NAME="CHANGELOG">
 	<!-- <TMPL_VAR NAME="REV"> -->
 	<tr class="changeinfo">
-		<td class="changeinfo"><TMPL_VAR NAME="USER"></td>
+		<td class="changeinfo"><TMPL_VAR NAME="USER" ESCAPE="HTML"></td>
 		<td class="changetime"><TMPL_VAR NAME="WHEN"></td>
 		<td class="changeinfo">
 		<TMPL_LOOP NAME="PAGES">