A few fixes:

- Need to reset the section marker for each new module.
- Should escape HTML in the log messges too :-)

diff --git a/cgi-bin/cvslog.cgi b/cgi-bin/cvslog.cgi
index 3c8cf7189ac6c20b7dd7fac1696e76e948d988f4..004161e93000eefdfdb2bc10a2a0dfaad5e25883 100755 (executable)
--- a/cgi-bin/cvslog.cgi
+++ b/cgi-bin/cvslog.cgi
@@ -58,7 +58,6 @@ my ($footer) = "$incdir/footer.inc";
 my ($menu) = "$incdir/menu.inc" ;
 
 # Section markers
-my ($sec) = 0;
 my ($secwho) = 1;
 my ($secfiles) = 2;
 my ($seclog) = 3;
@@ -106,6 +105,7 @@ my(@modules) = split (/\s+/, $modulelist);
 
 foreach my $module (@modules) {
     my($firstentry) = 1;
+    my($sec) = 0;
     print <<"END";
             <div>
               <h3>
@@ -135,7 +135,7 @@ END
                         @log = &trim_array(@log);
                         foreach my $logline (@log) {
                             $logline =~ s/^\t//;
-                            print "$logline\n";
+                            print escapeHTML("$logline\n");
                         }
                         @log = ();
                         print <<"END";
@@ -251,7 +251,7 @@ END
             @log = &trim_array(@log);
             foreach my $logline (@log) {
                 $logline =~ s/^\t//;
-                print "$logline\n";
+                print escapeHTML("$logline\n");
             }
             @log = ();
             print <<"END";