Escape titles and dates on their way out of the HTML. It _shouldn't_ be

[pr0n] / perl / Sesse / pr0n / Listing.pm

diff --git a/perl/Sesse/pr0n/Listing.pm b/perl/Sesse/pr0n/Listing.pm
index f478bb892b36319169ab39a1df5d34a669a897b5..294b7bc278c472a650733e7051e29050a0b216d7 100644 (file)
--- a/perl/Sesse/pr0n/Listing.pm
+++ b/perl/Sesse/pr0n/Listing.pm
@@ -31,8 +31,8 @@ sub handler {
 
        while (my $ref = $q->fetchrow_hashref()) {
                my $id = $ref->{'id'};
-               my $date = $ref->{'date'};
-               my $name = $ref->{'name'};
+               my $date = HTML::Entities::encode_entities(Encode::decode_utf8($ref->{'date'}));
+               my $name = HTML::Entities::encode_entities(Encode::decode_utf8($ref->{'name'}));
                
                $r->print("      <li><a href=\"$id/\">$name</a> ($date)</li>\n");
        }