w3m

commit 08d106df36eaf5881dfb5dbae4b20c08fb6e38dd
parent c764f8c3b77e64f9135ccf6c5639b7926b48b542
Author: ukai <ukai>
Date:   Fri,  6 Dec 2002 03:40:45 +0000

* version.c.in: w3m/0.3.2.2+cvs
* NEWS: 0.3.2.2
From: Fumitoshi UKAI  <ukai@debian.or.jp>

Diffstat:
M
ChangeLog
 | 
10
++++++++++
M
NEWS
 | 
6
++++++
M
file.c
 | 
4
++--
M
version.c.in
 | 
2
+-

4 files changed, 19 insertions(+), 3 deletions(-)
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,13 @@
+2002-12-06  Fumitoshi UKAI  <ukai@debian.or.jp>
+
+	* version.c.in: w3m/0.3.2.2+cvs
+	* NEWS: 0.3.2.2
+
+2002-12-06  Hironori SAKAMOTO <hsaka@mth.biglobe.ne.jp>
+
+	* security fix
+	* file.c (process_img): html_quote()
+
 2002-12-06  Takahashi Youichirou <nikuq@hk.airnet.ne.jp>
 
 	* [w3m-dev 03530] save history
diff --git a/NEWS b/NEWS
@@ -29,6 +29,12 @@ w3m 0.3.3 or 0.4?
 
 ----------------------------------------------------------------
 
+w3m 0.3.2.2 - 2002-12-06
+
+* security fix: html_quote for img alt attributes
+
+----------------------------------------------------------------
+
 w3m 0.3.2.1 - 2002-11-27
 
 * security fix: html_quote for frame contents
diff --git a/file.c b/file.c
@@ -3139,11 +3139,11 @@ process_img(struct parsed_tag *tag, int width)
 		Strcat_charp(tmp, html_quote(Strnew_charp_n(q, nw)->ptr));
 	    }
 	    else
-		Strcat_charp(tmp, q);
+		Strcat_charp(tmp, html_quote(q));
 	}
 	else
 #endif
-	    Strcat_charp(tmp, q);
+	    Strcat_charp(tmp, html_quote(q));
 	goto img_end;
     }
     if (w > 0 && i > 0) {
diff --git a/version.c.in b/version.c.in
@@ -1,5 +1,5 @@
 /* $Id$ */
-#define CURRENT_VERSION "w3m/0.3.2.1+cvs"
+#define CURRENT_VERSION "w3m/0.3.2.2+cvs"
 
 #ifndef FM_H
 char *w3m_version = CURRENT_VERSION;