diff options
author | Eric Wong <e@80x24.org> | 2017-02-19 03:44:27 +0000 |
---|---|---|
committer | Eric Wong <e@80x24.org> | 2017-02-19 19:03:34 +0000 |
commit | a2d5afa6a83ab8f97dd344d72be537952255b3e8 (patch) | |
tree | 1f74a1147e2f56e2382ce698ceb8a62c87ac24d1 /lib | |
parent | 3adb3d824864804a357b68dd33f9c2c973742174 (diff) | |
download | public-inbox-a2d5afa6a83ab8f97dd344d72be537952255b3e8.tar.gz |
For now, this avoids an HTML injection vector. We'll try to have more consistent error reporting in the future.
Diffstat (limited to 'lib')
-rw-r--r-- | lib/PublicInbox/RepoGitDiff.pm | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/PublicInbox/RepoGitDiff.pm b/lib/PublicInbox/RepoGitDiff.pm index 0e79f119..26728402 100644 --- a/lib/PublicInbox/RepoGitDiff.pm +++ b/lib/PublicInbox/RepoGitDiff.pm @@ -54,7 +54,7 @@ sub call_git_diff { $qsp->psgi_return($env, undef, sub { # parse header my ($r) = @_; if (!defined $r) { - [ 500, [ 'Content-Type', 'text/html' ], [ $git->err ]]; + [ 500, [ 'Content-Type', 'text/plain' ], [ $git->err ]]; } elsif ($r == 0) { [ 200, [ 'Content-Type', 'text/html' ], [ delete($req->{dhtml}). |