[Pypi-checkins] r836 - trunk/pypi

Sat Jul 31 18:58:39 CEST 2010

Author: martin.von.loewis
Date: Sat Jul 31 18:58:35 2010
New Revision: 836

Modified:
   trunk/pypi/webui.py
Log:
CGI-escape package name in simple index.


Modified: trunk/pypi/webui.py
==============================================================================

--- trunk/pypi/webui.py	(original)
+++ trunk/pypi/webui.py	Sat Jul 31 18:58:35 2010
@@ -612,7 +612,8 @@
             html.append("<body>\n")
             for name,stable_version in self.store.get_packages():
                 qname = urllib.quote(name.encode("utf-8"))
-                html.append("<a href='%s/'>%s</a><br/>\n" % (qname,name))
+                ename = cgi.escape(name)
+                html.append("<a href='%s/'>%s</a><br/>\n" % (qname,ename))
             html.append("</body></html>")
             html = ''.join(html).encode('utf-8')
             self.handler.send_response(200, 'OK')
