Commit 1c5ecdf1 authored by Frédéric Buclin's avatar Frédéric Buclin

Bug 1253267: Possible DOT injection vulnerability in dependency graphs if long…

Bug 1253267: Possible DOT injection vulnerability in dependency graphs if long bug summaries are wrapped r/a=dkl
parent 7621e455
......@@ -198,6 +198,9 @@ foreach my $k (@bug_ids) {
utf8::encode($summary) if utf8::is_utf8($summary);
}
$summary =~ s/([\\\"])/\\$1/g;
# Newlines must be escaped too, to not break the .map file
# and to prevent code injection.
$summary =~ s/\n/\\n/g;
push(@params, qq{label="$k\\n$summary"});
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment