diff CHANGES.txt @ 4577:528fe0a3af24

issue2550711 Fix XSS vulnerability when username contains HTML code. Thanks to Thomas Arendsen Hein for reporting and patch.
author Ralf Schlatterbeck <rsc@runtux.com>
date Thu, 05 Jan 2012 15:56:15 +0100
parents bce2c4254058
children 941681fec1b0
line wrap: on
line diff
--- a/CHANGES.txt	Wed Jan 04 19:09:47 2012 +0100
+++ b/CHANGES.txt	Thu Jan 05 15:56:15 2012 +0100
@@ -55,6 +55,8 @@
   backported version of my proposed changes to
   email.header.decode_header in http://bugs.python.org/issue1079
   (Ralf)
+- issue2550711 Fix XSS vulnerability when username contains HTML code,
+  thanks to Thomas Arendsen Hein for reporting and patch.
 
 
 2011-07-15: 1.4.19

Roundup Issue Tracker: http://roundup-tracker.org/