Bad HTML encoding in blames

[sibzou]

Gitea Version

1.15.6

Git Version

2.33.1

Operating System

Arch Linux

How are you running Gitea?

Using gitea official builds from dl.gitea.io/gitea. It's the gitea-1.15.6-linux-amd64 executable.

Database

SQLite

Can you reproduce the bug on the Gitea demo site?

Yes, here : https://try.gitea.io/issuereporter287/repo

Log Gist

No response

Description

Reproduction :

• create a new repo in the web interface
• commit a new file in this repo and put special characters in the commit like <, > or '
• push the commit in gitea
• look at the new file blame in the web interface

Result : the special characters of the commit text are badly encoded on the blame page.

I tested by commiting <yes> l'apo. It is displayed as <yes> l'apo on the web page.

Screenshots

[sibzou]

The <a> tag contains <yes> l'apo. It should contain <yes> l'apo. It's the same thing for the title attribute of <a>.

[wxiaoguang]

I think it is a double-encoding bug.

Can you share the existing reproducible URL on try.gitea.io? Then developers can view the bug at first glance.

[sibzou]

Yes it is here https://try.gitea.io/issuereporter287/repo .

https://try.gitea.io/issuereporter287/repo/blame/commit/a714ea7288a2a97e5d3112af0c6d336cf4cacf6a/file