From 2e4537096ad13b29b0b76f425aea363716265785 Mon Sep 17 00:00:00 2001
From: Alex Iribarren <Alex.Iribarren@cern.ch>
Date: Mar 09 2021 16:38:52 +0000
Subject: Escape vcs and disturl


---

diff --git a/www/kojiweb/buildinfo.chtml b/www/kojiweb/buildinfo.chtml
index dd4aa35..1198e07 100644
--- a/www/kojiweb/buildinfo.chtml
+++ b/www/kojiweb/buildinfo.chtml
@@ -52,12 +52,12 @@
     #end if
     #if $vcs
     <tr>
-        <th><label title="Package source code VCS location">VCS</label></th><td>$vcs</td>
+        <th><label title="Package source code VCS location">VCS</label></th><td>$util.escapeHTML($vcs)</td>
     </tr>
     #end if
     #if $disturl
     <tr>
-        <th>DistURL</th><td>$disturl</td>
+        <th>DistURL</th><td>$util.escapeHTML($disturl)</td>
     </tr>
     #end if
     <tr>
diff --git a/www/kojiweb/rpminfo.chtml b/www/kojiweb/rpminfo.chtml
index d2794e1..fe2c714 100644
--- a/www/kojiweb/rpminfo.chtml
+++ b/www/kojiweb/rpminfo.chtml
@@ -70,12 +70,12 @@
     </tr>
     #if $vcs
     <tr>
-        <th><label title="Package source code VCS location">VCS</label></th><td>$vcs</td>
+        <th><label title="Package source code VCS location">VCS</label></th><td>$util.escapeHTML($vcs)</td>
     </tr>
     #end if
     #if $disturl
     <tr>
-        <th>DistURL</th><td>$disturl</td>
+        <th>DistURL</th><td>$util.escapeHTML($disturl)</td>
     </tr>
     #end if
     #end if