From c3bb52e4479e43700ef0a90755904c92351d046d Mon Sep 17 00:00:00 2001
From: Christian Neukirchen <chneukirchen@gmail.com>
Date: Thu, 25 Sep 2008 16:12:26 +0200
Subject: Escape link URLs

---
 trivium.rb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/trivium.rb b/trivium.rb
index 3e45eb5..fc5d652 100644
--- a/trivium.rb
+++ b/trivium.rb
@@ -62,8 +62,8 @@ class Dots < String
       case name
       when "link"
         title, desc = body.split("|", 2)
-        %{<p class="link"><span><a href="#{args.strip}">#{title.strip}</a>#{
-          SpanBlueCloth.new(desc.to_s).to_html}</span></p>}
+        %{<p class="link"><span><a href="#{CGI.escapeHTML(args.strip)}">#{
+          title.strip}</a>#{SpanBlueCloth.new(desc.to_s).to_html}</span></p>}
       when "quote"
         if args.strip.empty?
           src = ""
-- 
cgit 1.4.1