Escape URLs.

78f68acb · Vincent Pelletier · 8f151042 · 78f68acb
Commit 78f68acb authored Apr 04, 2013 by Vincent Pelletier
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

apachedex/__init__.py apachedex/__init__.py +2 -2

No files found.
--- a/apachedex/__init__.py
+++ b/apachedex/__init__.py
@@ -240,8 +240,8 @@ class GenericSiteStats(object):
          append('<td>%s</td><td class="text">%s</td>'
            '<td class="text">%s</td>' % (
            getHitForUrl(referer_counter),
-            url,
-            '<br/>'.join('%i: %s' % (hit, referer) for referer, hit in sorted(
+            escape(url),
+            '<br/>'.join('%i: %s' % (hit, escape(referer)) for referer, hit in sorted(
              referer_counter.iteritems(), key=ITEMGETTER1, reverse=True
            )[:N_REFERRER_PER_ERROR_URL]),
          ))