[Pypi-checkins] r825 - trunk/pypi

[martin.von.loewis]

Author: martin.von.loewis
Date: Sun Jul 25 19:04:34 2010
New Revision: 825

Modified:
   trunk/pypi/webui.py
Log:
Escape URLs as they might contain quote characters.


Modified: trunk/pypi/webui.py
==============================================================================
--- trunk/pypi/webui.py	(original)
+++ trunk/pypi/webui.py	Sun Jul 25 19:04:34 2010
@@ -595,6 +595,8 @@
                 rel = ' rel="%s"' % rel
             else:
                 rel = ''
+            href = cgi.escape(href, quote=True)
+            text = cgi.escape(text)
             html.append("""<a href="%s"%s>%s</a><br/>\n""" % (href, rel, text))
         html.append("</body></html>")
         html = ''.join(html)