X-Git-Url: http://git.shiar.net/minimedit.git/blobdiff_plain/7213175b8391e8f47f54096fada4fdc33d82b8a1..86c2b19f372b3d7d4556d60586215ccf3d72a6c7:/widget/login/commits.php

diff --git a/widget/login/commits.php b/widget/login/commits.php
index b86b6c5..b9cae45 100644
--- a/widget/login/commits.php
+++ b/widget/login/commits.php
@@ -18,7 +18,8 @@ if ( $log = popen($gitcmd, 'r') ) {
 		list ($atime, $author, $message) = explode("\t", $line, 3);
 		list ($author) = explode(' ', $author); # first name only
 		printf('<li>%s <small class="date">%s • %s</small></li>'."\n",
-			$message, $author, strftime('%F %H:%M', $atime)
+			htmlspecialchars($message),
+			htmlspecialchars($author), strftime('%F %H:%M', $atime)
 		);
 		$lines++;
 	}