annotate roundup/dist/command/install_lib.py @ 4851:24b8011cd2dc
Fix XSS in issue2550817
Note that the code that triggers that particular bug is no longer in
roundup core. But the change to the templates we suggest is a *lot*
safer as it always escapes the error and ok messages now.
If you are upgrading: you *MUST* read doc/upgrading.txt and do the
necessary changes to your templates, the escaping now happens in the
template and not in the roundup code. So if you don't make the necessary
changes *you are vulnerable*.
| author |
Ralf Schlatterbeck <rsc@runtux.com> |
| date |
Fri, 20 Dec 2013 18:24:10 +0100 |
| parents |
85dfe17c182e |
| children |
42bf0a707763 |
| rev |
line source |
4516
Bernhard Reiter <Bernhard.Reiter@intevation.de>
parents:
diff
changeset
|
1 from roundup.dist.command.build import build_message_files, check_manifest
|
Bernhard Reiter <Bernhard.Reiter@intevation.de>
parents:
diff
changeset
|
2 from distutils.command.install_lib import install_lib as base
|
Bernhard Reiter <Bernhard.Reiter@intevation.de>
parents:
diff
changeset
|
3
|
Bernhard Reiter <Bernhard.Reiter@intevation.de>
parents:
diff
changeset
|
4 class install_lib(base):
|
Bernhard Reiter <Bernhard.Reiter@intevation.de>
parents:
diff
changeset
|
5
|
Bernhard Reiter <Bernhard.Reiter@intevation.de>
parents:
diff
changeset
|
6 def run(self):
|
Bernhard Reiter <Bernhard.Reiter@intevation.de>
parents:
diff
changeset
|
7 check_manifest()
|
Bernhard Reiter <Bernhard.Reiter@intevation.de>
parents:
diff
changeset
|
8 build_message_files(self)
|
Bernhard Reiter <Bernhard.Reiter@intevation.de>
parents:
diff
changeset
|
9 base.run(self)
|
