Skip to content

bugzilla
bugzilla
Commit 1551e237 authored by mkanat%bugzilla.org's avatar mkanat%bugzilla.org
Browse files
Options

Bug 367674: [SECURITY] XSS when reading Atom feeds due to unescaped HTML

Patch By Frédéric Buclin <LpSolit@gmail.com> r=bkor, a=mkanat
parent 1e1ee3db
Hide whitespace changes
Inline Side-by-side
Showing with 12 additions and 12 deletions
template/en/default/list/list.atom.tmpl
View file @ 1551e237
......@@ -62,23 +62,23 @@
<tr>
<th>Field</th><th>Value</th>
</tr><tr>
<td>[% columns.opendate.title FILTER none %]</td>
<td>[% bug.opendate FILTER none %]</td>
<td>[% columns.opendate.title FILTER html %]</td>
<td>[% bug.opendate FILTER html %]</td>
</tr><tr>
<td>[% columns.assigned_to_realname.title FILTER none %]</td>
<td>[% bug.assigned_to_realname FILTER none %]</td>
<td>[% columns.assigned_to_realname.title FILTER html %]</td>
<td>[% bug.assigned_to_realname FILTER html %]</td>
</tr><tr>
<td>[% columns.priority.title FILTER none %]</td>
<td>[% bug.priority FILTER none %]</td>
<td>[% columns.priority.title FILTER html %]</td>
<td>[% bug.priority FILTER html %]</td>
</tr><tr>
<td>[% columns.bug_severity.title FILTER none %] </td>
<td>[% bug.bug_severity FILTER none %]</td>
<td>[% columns.bug_severity.title FILTER html %] </td>
<td>[% bug.bug_severity FILTER html %]</td>
</tr><tr>
<td>[% columns.bug_status.title FILTER none %]</td>
<td>[% bug.bug_status FILTER none %]</td>
<td>[% columns.bug_status.title FILTER html %]</td>
<td>[% bug.bug_status FILTER html %]</td>
</tr><tr>
<td>[% columns.changeddate.title FILTER none %]</td>
<td>[% bug.changeddate FILTER none -%]</td>
<td>[% columns.changeddate.title FILTER html %]</td>
<td>[% bug.changeddate FILTER html -%]</td>
</tr>
</table>
[% END %]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment