From: Mischa POSLAWSKY <perl@shiar.org>
Date: Wed, 22 Mar 2017 22:29:35 +0000 (+0100)
Subject: browser: escape titles in resource links
X-Git-Tag: v1.9~7
X-Git-Url: http://git.shiar.nl/sheet.git/commitdiff_plain/f93736273156f8b382479bf5bda1776d7b803800

browser: escape titles in resource links

Recent data includes at least "<textarea>" in #readonly-attr,
breaking further HTML if left unescaped.
---

diff --git a/browser.plp b/browser.plp
index f8b20a9..4a964fd 100644
--- a/browser.plp
+++ b/browser.plp
@@ -339,7 +339,7 @@ sub saytitlecol {
 		say '</p>';
 	}
 	printf 'Resources: %s.', join(', ', map {
-		sprintf '<a href="%s">%s</a>', EscapeHTML($_->{url}), $_->{title}
+		sprintf '<a href="%s">%s</a>', EscapeHTML($_->{url}), EscapeHTML($_->{title})
 	} @$_) for grep { @$_ } $row->{links} // ();
 	printf '<br>Parent feature: %s.', join(', ', map {
 		sprintf '<a href="%s">%s</a>', EscapeHTML("#$_"), $caniuse->{data}->{$_}->{title}