debian/notmuch
1
0
Fork 0
mirror of https://git.notmuchmail.org/git/notmuch synced 2024-11-22 10:58:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

nmweb: escape subject in search view

Browse source 
Fix a bug reported by Jakub Wilk [1].

[1]: id:20220822064717.qftn4tr7cs4r2ian@jwilk.net
This commit is contained in:
David Bremner 2022-09-05 08:03:39 -03:00
parent bf8aa34324
commit 48d6b31485
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
devel/notmuch-web/nmweb.py
View file

@ -131,7 +131,7 @@ env.globals['mailto_addrs'] = mailto_addrs
def link_msg(msg): def link_msg(msg):
lnk = quote_plus(msg.messageid.encode('utf8')) lnk = quote_plus(msg.messageid.encode('utf8'))
try: try:
subj = msg.header('Subject') subj = html.escape(msg.header('Subject'))
except LookupError: except LookupError:
subj = "" subj = ""
out = '<a href="%s/show/%s">%s</a>' % (prefix, lnk, subj) out = '<a href="%s/show/%s">%s</a>' % (prefix, lnk, subj)