URI escape branch names in URLs. Don't strip + from branch name.

diff --git a/cgi-bin/show_history.pl b/cgi-bin/show_history.pl
index 7d5219c3d9773b6a2a0dd96cda16cb08cffc43f3..50b1bf384cf85af6ea8d8c950385fb6871ce1949 100755 (executable)
--- a/cgi-bin/show_history.pl
+++ b/cgi-bin/show_history.pl
@@ -31,7 +31,7 @@ die $DBI::errstr unless $db;
 
 my $query = new CGI;
 my $member = $query->param('nm'); $member =~ s/[^a-zA-Z0-9_ -]//g;
-my $branch = $query->param('br'); $branch =~ s/[^a-zA-Z0-9_ .-]//g;
+my $branch = $query->param('br'); $branch =~ s/[^a-zA-Z0-9+_ .-]//g;
 my $hm = $query->param('hm');  $hm =~ s/[^a-zA-Z0-9_ -]//g;
 $hm = '240' unless $hm =~ /^\d+$/;
 

diff --git a/templates/fstatus.tt b/templates/fstatus.tt
index 1e2c8e9d5b1b25bce97ae88217d358187dfd5bd9..429a448b586a8702997a0d7b53dde39e92c42181 100644 (file)
--- a/templates/fstatus.tt
+++ b/templates/fstatus.tt
@@ -111,7 +111,7 @@ See accompanying License file for license details
 [% END %]
 <tr [% PROCESS cl bgfor=row.stage %]>
     <td [% PROCESS cl bgfor=row.current_stage %]><a 
-    href="show_history.pl?nm=[% row.sysname %]&amp;br=[% row.branch %]"
+    href="show_history.pl?nm=[% row.sysname %]&amp;br=[% row.branch | uri %]"
     title="History"
   >[% row.sysname %]</a></td>
     <td>[% PROCESS sysnotes %]</td>

diff --git a/templates/log.tt b/templates/log.tt
index 8a769450ead59044d56b97e7280eb905d4ca858f..0e9b8b216cb6d4253497368675f25d0af3f8d1e2 100644 (file)
--- a/templates/log.tt
+++ b/templates/log.tt
@@ -46,7 +46,7 @@ See accompanying License file for license details
     </tr>
     <tr>
         <td>[% system %]</td>
-        <td><a href="/cgi-bin/show_history.pl?nm=[% system %]&amp;br=[% branch %]">[% branch %]</a></td>
+        <td><a href="/cgi-bin/show_history.pl?nm=[% system %]&amp;br=[% branch | uri %]">[% branch %]</a></td>
         <td>[% info_row.operating_system %] [% info_row.os_version %]</td>
         <td>[% info_row.compiler %] [% info_row.compiler_version %]</td>
         <td>[% info_row.architecture %]</td>

diff --git a/templates/status.tt b/templates/status.tt
index 573dfb06776b985836fcced4e15642a8fd4af2e6..2e1f2e8aebabd860a45d573fe2ad034e5b6f5730 100644 (file)
--- a/templates/status.tt
+++ b/templates/status.tt
@@ -82,7 +82,7 @@ See accompanying License file for license details
 [% END %]
 <tr [% PROCESS cl bgfor=row.stage %]>
     <td><a 
-    href="show_history.pl?nm=[% row.sysname %]&amp;br=[% row.branch %]"
+    href="show_history.pl?nm=[% row.sysname %]&amp;br=[% row.branch | uri %]"
     title="History"
     >[% row.sysname %]</a></td>
     <td>[% PROCESS sysnotes %]</td>