From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id fPqRIXLYFWPjZAEAbAwnHQ (envelope-from ) for ; Mon, 05 Sep 2022 13:07:30 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id k/uoIHLYFWPTHgEA9RJhRA (envelope-from ) for ; Mon, 05 Sep 2022 13:07:30 +0200 Received: from mail.notmuchmail.org (yantan.tethera.net [135.181.149.255]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 0AD5935D80 for ; Mon, 5 Sep 2022 13:07:30 +0200 (CEST) Received: from yantan.tethera.net (localhost [127.0.0.1]) by mail.notmuchmail.org (Postfix) with ESMTP id 2EA4D5F374; Mon, 5 Sep 2022 11:07:27 +0000 (UTC) Received: from fethera.tethera.net (fethera.tethera.net [IPv6:2607:5300:60:c5::1]) by mail.notmuchmail.org (Postfix) with ESMTP id C87525F36E for ; Mon, 5 Sep 2022 11:07:24 +0000 (UTC) Received: by fethera.tethera.net (Postfix, from userid 1001) id 95CB25FBC0; Mon, 5 Sep 2022 07:07:23 -0400 (EDT) Received: (nullmailer pid 1881027 invoked by uid 1000); Mon, 05 Sep 2022 11:07:22 -0000 From: David Bremner To: Jakub Wilk , notmuch@notmuchmail.org Subject: [PATCH] nmweb: escape subject in search view Date: Mon, 5 Sep 2022 08:07:21 -0300 Message-Id: <20220905110721.1881015-1-david@tethera.net> X-Mailer: git-send-email 2.35.2 In-Reply-To: <20220822064717.qftn4tr7cs4r2ian@jwilk.net> References: <20220822064717.qftn4tr7cs4r2ian@jwilk.net> MIME-Version: 1.0 Message-ID-Hash: XD5TOBJAPV24DM5NC2XCKWBDNJJX7V5X X-Message-ID-Hash: XD5TOBJAPV24DM5NC2XCKWBDNJJX7V5X X-MailFrom: bremner@tethera.net X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-notmuch.notmuchmail.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.3 Precedence: list List-Id: "Use and development of the notmuch mail system." List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: DE ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1662376050; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-owner:list-unsubscribe:list-subscribe:list-post; bh=dHKalO0CWC6bdJznjU3OGBtHgiwAGRDMx1GZilrMSJg=; b=rHtKViS32cN53j8oXZmmTQZXtywNibs/AthlMhOapVXLCFNgzLjDk05dRLg7fpjN6C5yeH qAn9ed5ZVWsMDe7F7aLV1ekC5jOVCCCLjS5029AWZuPfMreSU2QUNucMOL6nX1CEGxjTQ4 xyfO49kXpiLoReWjsH0z3UvreywT+0//uFmR6hJG9Q+PD0qXLOUua1d7GlI/8POcCgWtE9 KYDz844FQPFQD6sb5+0fy/JF1nOAaK84Sbzr4iOz0RHTBJBUMCCQI8sOLBnJ4u5lbQvIhE oS/LSnv3pMbtCOS9nQiH/ruyknrn1ITBcSF9WBNsQHj4DHVdAN0h6JyaYPDWZA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1662376050; a=rsa-sha256; cv=none; b=bC+DYUWjuCVhgg7SM8xWCxldTBelilSND4vqGrKKDjaC/sLrjaYyWqnmorkdalLIp14b4T puSWWDsJklOSLbNCJJl8La4h0HhU0FTkiWAsLRB64EQ8GPir4Zc9q/Wx3u/qQ+ebvwL9dr 6k0+oOJLtLs6KGFr/E/6sPLxVUDqZTfKylLDQpMkFGpMW8lZ5zqb7Fh/7dsqwwBhoof2Lu dObKrIBAZB7NBySbtp0UoipsqA56/XWKYZ5EHap8CX+ho1C8/99ScFQjKA074aLR/iVkGB 4OWJ1P1uO4vjBYCc+yxwY3l/n+l97W59W/J/OlkbuxXTKQWPRPaASiFkvJtgsA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of notmuch-bounces@notmuchmail.org designates 135.181.149.255 as permitted sender) smtp.mailfrom=notmuch-bounces@notmuchmail.org X-Migadu-Spam-Score: -1.81 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of notmuch-bounces@notmuchmail.org designates 135.181.149.255 as permitted sender) smtp.mailfrom=notmuch-bounces@notmuchmail.org X-Migadu-Queue-Id: 0AD5935D80 X-Spam-Score: -1.81 X-Migadu-Scanner: scn0.migadu.com X-TUID: F4+iDvZDVRhf Fix a bug reported by Jakub Wilk [1]. [1]: id:20220822064717.qftn4tr7cs4r2ian@jwilk.net --- devel/notmuch-web/nmweb.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devel/notmuch-web/nmweb.py b/devel/notmuch-web/nmweb.py index 928e4863..7b555c62 100755 --- a/devel/notmuch-web/nmweb.py +++ b/devel/notmuch-web/nmweb.py @@ -131,7 +131,7 @@ env.globals['mailto_addrs'] = mailto_addrs def link_msg(msg): lnk = quote_plus(msg.messageid.encode('utf8')) try: - subj = msg.header('Subject') + subj = html.escape(msg.header('Subject')) except LookupError: subj = "" out = '%s' % (prefix, lnk, subj) -- 2.35.2