From f3ed43a1caabdb06c4acd35edd6c4d8149d78cdb Mon Sep 17 00:00:00 2001
From: Joey Hess <joey@kitenet.net>
Date: Thu, 9 Jun 2011 10:46:09 -0400
Subject: [PATCH] encode html

---
 IkiWiki/Plugin/userlist.pm | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/IkiWiki/Plugin/userlist.pm b/IkiWiki/Plugin/userlist.pm
index f3e5cd462..2ebf61978 100644
--- a/IkiWiki/Plugin/userlist.pm
+++ b/IkiWiki/Plugin/userlist.pm
@@ -58,10 +58,13 @@ sub showuserlist ($$) {
 	my $h="<table border=\"1\">\n";
 	$h.="<tr><th>".gettext("login")."</th><th>".gettext("email")."</th></tr>\n";
 	my $info=IkiWiki::userinfo_retrieve();
+	eval q{use HTML::Entities};
 	if (ref $info) {
 		foreach my $user (sort { $info->{$a}->{regdate} <=> $info->{$b}->{regdate} } keys %$info) {
 			my %i=%{$info->{$user}};
-			$h.="<tr><td>$user</td><td>".(defined $i{email} ? $i{email} : "")."</tr>\n";
+			$h.="<tr><td>".encode_entities($user)."</td><td>".
+				encode_entities(defined $i{email} ? $i{email} : "").
+				"</td></tr>\n";
 		}
 	}
 	$h.="</table>\n";