===================================================================
RCS file: /cvs/cvsweb/cvsweb.cgi,v
retrieving revision 4.13
retrieving revision 4.14
diff -u -p -r4.13 -r4.14
--- cvsweb/cvsweb.cgi	2019/11/11 12:40:12	4.13
+++ cvsweb/cvsweb.cgi	2019/11/11 12:46:23	4.14
@@ -1,5 +1,5 @@
 #!/usr/bin/perl
-# $Id: cvsweb.cgi,v 4.13 2019/11/11 12:40:12 schwarze Exp $
+# $Id: cvsweb.cgi,v 4.14 2019/11/11 12:46:23 schwarze Exp $
 # $knu: cvsweb.cgi,v 1.299 2010/11/13 16:37:18 simon
 #
 # cvsweb - a CGI interface to CVS trees.
@@ -365,7 +365,7 @@ if (defined($ENV{QUERY_STRING})) {
       $val = uri_unescape($val);
       $val =~ /([^a-zA-Z_01-9.\/-])/ and fatal('404 Not Found',
         'Invalid character "%s" in the value "%s" of the query parameter "%s"',
-        $1, $value, $key);
+        $1, $val, $key);
     } else {
       $val = 1;
     }
@@ -1179,7 +1179,7 @@ EOF
 <legend>General options</legend>
 <input type="hidden" name="copt" value="1" />
 EOF
-    for my $v qw(hidecvsroot hidenonreadable) {
+    for my $v (qw(hidecvsroot hidenonreadable)) {
       printf(qq{<input type="hidden" name="%s" value="%s" />\n},
              $v, $input{$v} || 0);
     }