tree 876c2e2699c813cc93a9a967b154887bf21402e7
parent 3288d99c92b03e9488289ddf1f687d5758e15a50
parent a376e37b2c418b8f630741552d76a5b18c87c133
author Junio C Hamano <gitster@pobox.com> 1575219881 -0800
committer Junio C Hamano <gitster@pobox.com> 1575219881 -0800

Merge branch 'jk/gitweb-anti-xss'

Some codepaths in "gitweb" that forgot to escape URLs generated
based on end-user input have been corrected.

* jk/gitweb-anti-xss:
  gitweb: escape URLs generated by href()
  t/gitweb-lib.sh: set $REQUEST_URI
  t/gitweb-lib.sh: drop confusing quotes
  t9502: pass along all arguments in xss helper