# HG changeset patch
# User Maxim Dounin <mdounin@mdounin.ru>
# Date 1322238962 0
# Node ID 0a8e51a1648411ca67a2be2b7bb2818ffbc324b5
# Parent  45272aab5eea5e02bf0aaf8b0da58c76533952d3
Added escaping of double quotes in ngx_escape_html().

Patch by Zaur Abasmirzoev.

diff -r 45272aab5eea -r 0a8e51a16484 src/core/ngx_string.c
--- a/src/core/ngx_string.c	Wed Nov 23 14:09:19 2011 +0000
+++ b/src/core/ngx_string.c	Fri Nov 25 16:36:02 2011 +0000
@@ -1657,6 +1657,10 @@
                 len += sizeof("&amp;") - 2;
                 break;
 
+            case '"':
+                len += sizeof("&quot;") - 2;
+                break;
+
             default:
                 break;
             }
@@ -1684,6 +1688,11 @@
             *dst++ = ';';
             break;
 
+        case '"':
+            *dst++ = '&'; *dst++ = 'q'; *dst++ = 'u'; *dst++ = 'o';
+            *dst++ = 't'; *dst++ = ';';
+            break;
+
         default:
             *dst++ = ch;
             break;