From 1961a0ca5067aa5e23d66ee20fd50854fb3cb0bc Mon Sep 17 00:00:00 2001
From: Jonas Fonseca <fonseca@diku.dk>
Date: Tue, 11 Sep 2007 13:21:00 +0200
Subject: [PATCH] NNTP: HTML escape header field values

---
 src/protocol/nntp/response.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/protocol/nntp/response.c b/src/protocol/nntp/response.c
index 77a0ecbd8..da3a462fb 100644
--- a/src/protocol/nntp/response.c
+++ b/src/protocol/nntp/response.c
@@ -235,7 +235,9 @@ add_nntp_html_start(struct string *html, struct connection *conn)
 				continue;
 			}
 
-			add_format_to_string(html, "<b>%s</b>: %s\n", entry, value);
+			add_format_to_string(html, "<b>%s</b>: ", entry);
+			add_html_to_string(html, value, strlen(value));
+			add_char_to_string(html, '\n');
 			mem_free(value);
 			mem_free(entry);
 		}