HTML not escaped in commit message
Brought to you by:
mmckechney
Menu
▾
▴
#6 HTML not escaped in commit message
While using v2.1.0.0, if an HTML tag is sent as part of the commit message, then it directly inserts the HTML into the message. I discovered this problem when I wrote a commit message saying I fixed a usage of a <li> tag. When I read the corresponding email, it placed a left-justified bullet point in the commit message, clearly showing it didn't escape the HTML.
The solution is to simply escape the HTML - "<li>" should show up as "<li>" when properly escaped and the email sent reads as the author intended.
Image showing the unescaped HTML.