debian/notmuch
1
0
Fork 0
mirror of https://git.notmuchmail.org/git/notmuch synced 2024-11-21 18:38:08 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

nmweb: escape subject in search view

Browse source 
Fix a bug reported by Jakub Wilk [1].

[1]: id:20220822064717.qftn4tr7cs4r2ian@jwilk.net
This commit is contained in:
David Bremner 2022-09-05 08:03:39 -03:00
parent bf8aa34324
commit 48d6b31485
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
devel/notmuch-web/nmweb.py
View file

@ -131,7 +131,7 @@ env.globals['mailto_addrs'] = mailto_addrs
def link_msg(msg):
lnk = quote_plus(msg.messageid.encode('utf8'))
try:
subj = msg.header('Subject')
subj = html.escape(msg.header('Subject'))
except LookupError:
subj = ""
out = '<a href="%s/show/%s">%s</a>' % (prefix, lnk, subj)