Fix escaping of infobar text against entity injection from filename

Fixes #2033.
This commit is contained in:
Colomban Wendling 2019-01-02 22:24:36 +01:00
parent 9838a8e9a0
commit c6356444b1

View File

@ -3459,7 +3459,7 @@ static GtkWidget* document_show_message(GeanyDocument *doc, GtkMessageType msgty
text = g_strdup_vprintf(format, args);
va_end(args);
markup = g_strdup_printf("<span size=\"larger\">%s</span>", text);
markup = g_markup_printf_escaped("<span size=\"larger\">%s</span>", text);
g_free(text);
info_widget = gtk_info_bar_new();