commit 10205366633be309af080130655520c40181e41f
author Maxim Dounin <mdounin@mdounin.ru> Wed Dec 14 18:04:06 2011 +0000
committer Maxim Dounin <mdounin@mdounin.ru> Wed Dec 14 18:04:06 2011 +0000
tree 05a97fd43410fae499f1c940fd3775ea5c28d49c
parent e415ec3b9987bf1e5cf53f87d8463952ec8d9e61

Merge of r4313:

Added escaping of double quotes in ngx_escape_html().

Patch by Zaur Abasmirzoev.

src/core/ngx_string.c

diff --git a/src/core/ngx_string.c b/src/core/ngx_string.c
index 29f8e0d..f5e1d4b 100644
--- a/src/core/ngx_string.c
+++ b/src/core/ngx_string.c
@@ -1657,6 +1657,10 @@
                 len += sizeof("&") - 2;
                 break;
 
+            case '"':
+                len += sizeof(""") - 2;
+                break;
+
             default:
                 break;
             }
@@ -1684,6 +1688,11 @@
             *dst++ = ';';
             break;
 
+        case '"':
+            *dst++ = '&'; *dst++ = 'q'; *dst++ = 'u'; *dst++ = 'o';
+            *dst++ = 't'; *dst++ = ';';
+            break;
+
         default:
             *dst++ = ch;
             break;