lib/string_hacks.rb @@ -13,6 +13,7 @@ libdir = OSX::NSBundle.mainBundle.resourcePath.stringByAppendingPathComponent("l $:.unshift(libdir, "#{libdir}/grit/lib", "#{libdir}/mime-types/lib") require 'grit' require 'time_extensions' +require 'string_hacks' require 'InfoWindowController' OSX.ns_import 'CommitSummaryCell' ApplicationController.rb @@ -151,9 +151,9 @@ class CommitsController < OSX::NSObject diffs = [] doc = @commit_details.mainFrame.DOMDocument title, message = active_commit.message.split("\n", 2) - set_html("title", title.strip.gsub("\n", "<br />")) + set_html("title", title.escapeHTML.strip.gsub("\n", "<br />")) if message - set_html("message", message.strip.gsub("\n", "<br />")) + set_html("message", message.escapeHTML.strip.gsub("\n", "<br />")) show_element("message") else hide_element("message") CommitsController.rb ceed7d12eaa21647294939eb24010c5aa2b2f0e0 Kevin Ballard kevin@sb.org http://github.com/Caged/gitnub/commit/019f7eab430c325acd58a548baa7856fdf69b24e 019f7eab430c325acd58a548baa7856fdf69b24e 2008-05-14T02:17:15-07:00 2008-05-14T02:17:15-07:00 Escape HTML in commit messages. Fixes #22 ae2e9089d76466d66006f680544d11a2c54d49e8 Kevin Ballard kevin@sb.org