HTML escape commit tooltip
HTML escape commit tooltip

--- a/templates/committip.tpl
+++ b/templates/committip.tpl
@@ -11,7 +11,7 @@
 {t}committer{/t}: {$commit->GetCommitter()} ({$commit->GetCommitterEpoch()|date_format:"%Y-%m-%d %H:%M:%S"})
 <br /><br />
 {foreach from=$commit->GetComment() item=line}
-{$line}<br />
+{$line|escape}<br />
 {/foreach}
 </div>
 

comments