From 6321a75e0ce6591d4071fc022ce418be9698e941 Mon Sep 17 00:00:00 2001
From: Joey Hess <joey@kitenet.net>
Date: Tue, 27 Sep 2011 10:45:21 -0400
Subject: track escaping change in upstream template

This is not belived to be XSS exploitable due to other checks in ikiwiki.

Thanks Olly Betts for review.
---
 templates/searchquery.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'templates')

diff --git a/templates/searchquery.tmpl b/templates/searchquery.tmpl
index 5b9fbbf7f..15bc78e28 100644
--- a/templates/searchquery.tmpl
+++ b/templates/searchquery.tmpl
@@ -70,7 +70,7 @@ $if{$field{language},Language: <b>$html{$field{language}}</b><br>}
 $if{$field{size},<span title="$html{$field{size}} bytes">Size: <b>$html{$filesize{$field{size}}}</b></span><br>}
 </div>
 </td>
-<td><B><A HREF="$field{url}">$html{$or{$field{caption},$field{title},$field{url},Untitled}}</A></B><BR>
+<td><B><A HREF="$html{$field{url}}">$html{$or{$field{caption},$field{title},$field{url},Untitled}}</A></B><BR>
 <small>$highlight{$field{sample},$terms}$if{$field{sample},...}</small><br>
 <small>
 $percentage% relevant$. matching:
-- 
cgit v1.2.3