From c6356444b12b0f2759546334caabb42fd6a28097 Mon Sep 17 00:00:00 2001
From: Colomban Wendling <ban@herbesfolles.org>
Date: Wed, 2 Jan 2019 22:24:36 +0100
Subject: [PATCH] Fix escaping of infobar text against entity injection from
 filename

Fixes #2033.
---
 src/document.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/document.c b/src/document.c
index 304d2c3a..37cf323c 100644
--- a/src/document.c
+++ b/src/document.c
@@ -3459,7 +3459,7 @@ static GtkWidget* document_show_message(GeanyDocument *doc, GtkMessageType msgty
 	text = g_strdup_vprintf(format, args);
 	va_end(args);
 
-	markup = g_strdup_printf("<span size=\"larger\">%s</span>", text);
+	markup = g_markup_printf_escaped("<span size=\"larger\">%s</span>", text);
 	g_free(text);
 
 	info_widget = gtk_info_bar_new();