web: URL escape link components

[bup.git] / lib / web / list-directory.html
diff --git a/lib/web/list-directory.html b/lib/web/list-directory.html

index 54668fb21ca1e37077915d879d9568739a91b56d..45b1f1d22e2e11ebca80bcc0906c9241ee4cb06e 100644 (file)
--- a/lib/web/list-directory.html
+++ b/lib/web/list-directory.html
@@ -1,3 +1,4 @@
+{% comment This template expects the default xhtml autoescaping. %}
  <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
  <html>
      <head>
@@ -29,7 +30,9 @@
                  </tr>
                  {% for (display, link, size) in dir_contents %}
                  <tr>
-                    <td class="dir-name"><a href="{{ link }}">{{ display }}</a></td>
+                    <td class="dir-name">
+                      <a href="{% raw link %}">{{ display }}</a>
+                    </td>
                      <td class="dir-size">{% if size != None %}{{ size }}{% else %}&nbsp;{% end %}</td>
                  </tr>
                  {% end %}