fix xss

git-svn-id: file:///raid/svn-personal/repoview/trunk@75 7e8b2a19-8934-dd40-8cb3-db22cdd5a80f

diff --git a/CGI/theme/modern.c b/CGI/theme/modern.c
index c6e10bca556db4b1ef423e63de5bf6500cef71cf..16675d2e4ca1779b622a0e9b3485ea5cb3aeb216 100644 (file)
--- a/CGI/theme/modern.c
+++ b/CGI/theme/modern.c
@@ -83,6 +83,8 @@ char* html_escape(const char* input) {
                        add_data(&r, "<");
                } else if(input[i] == '>') {
                        add_data(&r, ">");
+               } else if(input[i] == '&') {
+                       add_data(&r, "&");
                } else {
                        cbuf[0] = input[i];
                        add_data(&r, cbuf);