Francois Gouget : testbot/web: Escape the filenames on the activity page.

[Alexandre Julliard]

Module: tools
Branch: master
Commit: 8e43dccf305bb07795c282bbedda3d9d623e7ab1
URL:    https://source.winehq.org/git/tools.git/?a=commit;h=8e43dccf305bb07795c282bbedda3d9d623e7ab1

Author: Francois Gouget <fgouget at codeweavers.com>
Date:   Fri Jun 15 14:00:11 2018 +0200

testbot/web: Escape the filenames on the activity page.

Signed-off-by: Francois Gouget <fgouget at codeweavers.com>
Signed-off-by: Alexandre Julliard <julliard at winehq.org>

---

 testbot/web/Activity.pl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/testbot/web/Activity.pl b/testbot/web/Activity.pl
index 8b1fd6d..5124017 100644
--- a/testbot/web/Activity.pl
+++ b/testbot/web/Activity.pl
@@ -215,7 +215,7 @@ EOF
         }
         else
         {
-          $Label .= " ". $VMStatus->{step}->FileName;
+          $Label .= " ". $self->escapeHTML($VMStatus->{step}->FileName);
           if ($VMStatus->{task}->CmdLineArg =~ /^\w+$/ and
               $Label =~ s/_(?:cross)?test(64)?\.exe$//)
           {