| commit | 2759dfe1c117426ad9f2e8ea4cef2a2088dd734e | [log] [tgz] |
|---|---|---|
| author | Brad Fitzpatrick <bradfitz@golang.org> | Thu May 30 22:02:25 2019 +0000 |
| committer | Brad Fitzpatrick <bradfitz@golang.org> | Thu May 30 22:13:31 2019 +0000 |
| tree | 00d7f0ccb359117d6fd891807ea51ad45f35ae45 | |
| parent | b5be17b51e37d7df6873a6769ccb095e7145f95c [diff] |
cmd/coordinator: HTML escape another URL This was missed from CL 179657. Change-Id: I7e3966c1cd02f347b0f3ce96c13951b86a6a2b9b Reviewed-on: https://go-review.googlesource.com/c/build/+/179697 Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
diff --git a/cmd/coordinator/coordinator.go b/cmd/coordinator/coordinator.go index ea5e411..1f289f2 100644 --- a/cmd/coordinator/coordinator.go +++ b/cmd/coordinator/coordinator.go
@@ -3292,7 +3292,7 @@ text := evt.text if htmlMode { if e == "running_exec" { - e = fmt.Sprintf("<a href='%s'>%s</a>", st.logsURLLocked(), e) + e = fmt.Sprintf("<a href='%s'>%s</a>", html.EscapeString(st.logsURLLocked()), e) } e = "<b>" + e + "</b>" text = "<i>" + html.EscapeString(text) + "</i>"