From: Joey Hess <joey@kitenet.net>
Date: Thu, 9 Jun 2011 14:46:09 +0000 (-0400)
Subject: encode html
X-Git-Url: https://sipb.mit.edu/gitweb.cgi/ikiwiki.git/commitdiff_plain/f3ed43a1caabdb06c4acd35edd6c4d8149d78cdb

encode html
---

diff --git a/IkiWiki/Plugin/userlist.pm b/IkiWiki/Plugin/userlist.pm
index f3e5cd462..2ebf61978 100644
--- a/IkiWiki/Plugin/userlist.pm
+++ b/IkiWiki/Plugin/userlist.pm
@@ -58,10 +58,13 @@ sub showuserlist ($$) {
 	my $h="<table border=\"1\">\n";
 	$h.="<tr><th>".gettext("login")."</th><th>".gettext("email")."</th></tr>\n";
 	my $info=IkiWiki::userinfo_retrieve();
+	eval q{use HTML::Entities};
 	if (ref $info) {
 		foreach my $user (sort { $info->{$a}->{regdate} <=> $info->{$b}->{regdate} } keys %$info) {
 			my %i=%{$info->{$user}};
-			$h.="<tr><td>$user</td><td>".(defined $i{email} ? $i{email} : "")."</tr>\n";
+			$h.="<tr><td>".encode_entities($user)."</td><td>".
+				encode_entities(defined $i{email} ? $i{email} : "").
+				"</td></tr>\n";
 		}
 	}
 	$h.="</table>\n";