[geany/geany] f3a855: Fix escaping of infobar text against entity injection from filename

Colomban Wendling git-noreply at xxxxx
Wed Jan 2 21:24:36 UTC 2019


Branch:      refs/heads/master
Author:      Colomban Wendling <ban at herbesfolles.org>
Committer:   Colomban Wendling <ban at herbesfolles.org>
Date:        Wed, 02 Jan 2019 21:24:36 UTC
Commit:      f3a85525aeff921097209d6ade6f9bb1cf2b7097
             https://github.com/geany/geany/commit/f3a85525aeff921097209d6ade6f9bb1cf2b7097

Log Message:
-----------
Fix escaping of infobar text against entity injection from filename

Fixes #2033.


Modified Paths:
--------------
    src/document.c

Modified: src/document.c
2 lines changed, 1 insertions(+), 1 deletions(-)
===================================================================
@@ -3459,7 +3459,7 @@ static GtkWidget* document_show_message(GeanyDocument *doc, GtkMessageType msgty
 	text = g_strdup_vprintf(format, args);
 	va_end(args);
 
-	markup = g_strdup_printf("<span size=\"larger\">%s</span>", text);
+	markup = g_markup_printf_escaped("<span size=\"larger\">%s</span>", text);
 	g_free(text);
 
 	info_widget = gtk_info_bar_new();



--------------
This E-Mail was brought to you by github_commit_mail.py (Source: https://github.com/geany/infrastructure).


More information about the Commits mailing list