ui-shared.c: use html_url_path() in repolink()

This makes sure that reponames and paths are properly escaped when used
as urls.

Signed-off-by: Lars Hjemli <hjemli@gmail.com>

diff --git a/ui-shared.c b/ui-shared.c
index a2f636c73d9dfb6da5b3e091ba8acdcbe2d5823a..2eddd2d14cf8c769c1bf6f3ad2c567580cd5027d 100644 (file)
--- a/ui-shared.c
+++ b/ui-shared.c
@@ -206,17 +206,17 @@ static char *repolink(char *title, char *class, char *page, char *head,
        }
        html(" href='");
        if (ctx.cfg.virtual_root) {
        }
        html(" href='");
        if (ctx.cfg.virtual_root) {

-               html_attr(ctx.cfg.virtual_root);
+               html_url_path(ctx.cfg.virtual_root);

                if (ctx.cfg.virtual_root[strlen(ctx.cfg.virtual_root) - 1] != '/')
                        html("/");
                if (ctx.cfg.virtual_root[strlen(ctx.cfg.virtual_root) - 1] != '/')
                        html("/");

-               html_attr(ctx.repo->url);
+               html_url_path(ctx.repo->url);

                if (ctx.repo->url[strlen(ctx.repo->url) - 1] != '/')
                        html("/");
                if (page) {
                if (ctx.repo->url[strlen(ctx.repo->url) - 1] != '/')
                        html("/");
                if (page) {

-                       html(page);
+                       html_url_path(page);

                        html("/");
                        if (path)
                        html("/");
                        if (path)

-                               html_attr(path);
+                               html_url_path(path);

                }
        } else {
                html(ctx.cfg.script_name);
                }
        } else {
                html(ctx.cfg.script_name);