From 813717c97fb54e69736b72e5ce2f4f4f938cf67a Mon Sep 17 00:00:00 2001
From: "timeless%mozdev.org"
 <timeless%mozdev.org@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Thu, 2 Jan 2003 17:07:34 +0000
Subject: [PATCH] Bug 187441 URLs not HTML encoded in output

git-svn-id: svn://10.0.0.236/trunk@135771 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/webtools/web-sniffer/cgiview.c | 11 ++++++++---
 mozilla/webtools/web-sniffer/html.c    |  3 +++
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/mozilla/webtools/web-sniffer/cgiview.c b/mozilla/webtools/web-sniffer/cgiview.c
index 47234499d5c..8783354126c 100644
--- a/mozilla/webtools/web-sniffer/cgiview.c
+++ b/mozilla/webtools/web-sniffer/cgiview.c
@@ -80,14 +80,16 @@ reportHTMLAttributeValue(void *a, HTML *html, Input *input)
 {
 	URL	*url;
 	View	*view;
+	char	*urlstring;
 
 	view = a;
 
 	if (html->currentAttributeIsURL)
 	{
 		url = urlRelative(html->base, html->currentAttribute->value);
-		fprintf(view->out, "<a href=%s%s>", me,
-			url ? (char*) url->url : "");
+		urlstring = escapeHTML(url ? (char*) url->url : "");
+		fprintf(view->out, "<a href=\"%s%s\">", me, urlstring);
+		free(urlstring);
 		urlFree(url);
 	}
 	viewHTMLAttributeValue(view, input);
@@ -151,12 +153,15 @@ void
 reportHTTPHeaderValue(void *a, Input *input, unsigned char *url)
 {
 	View	*view;
+	char	*urlstring;
 
 	view = a;
 
 	if (url)
 	{
-		fprintf(view->out, "<a href=%s%s>", me, url);
+		urlstring = escapeHTML(url);
+		fprintf(view->out, "<a href=\"%s%s\">", me, urlstring);
+		free(urlstring);
 	}
 	viewHTTPHeaderValue(view, input);
 	if (url)
diff --git a/mozilla/webtools/web-sniffer/html.c b/mozilla/webtools/web-sniffer/html.c
index b67c4efdbe0..32d0316711c 100644
--- a/mozilla/webtools/web-sniffer/html.c
+++ b/mozilla/webtools/web-sniffer/html.c
@@ -899,6 +899,9 @@ escapeHTML(unsigned char *str)
 			case '&':
 				replacement = "&amp;";
 				break;
+			case '"':
+				replacement = "&quot;";
+				break;
 			default:
 				replacement = buf;
 				buf[0] = str[j];