Mercurial > p > roundup > code
diff CHANGES.txt @ 4577:528fe0a3af24
issue2550711 Fix XSS vulnerability when username contains HTML code.
Thanks to Thomas Arendsen Hein for reporting and patch.
| author | Ralf Schlatterbeck <rsc@runtux.com> |
|---|---|
| date | Thu, 05 Jan 2012 15:56:15 +0100 |
| parents | bce2c4254058 |
| children | 941681fec1b0 |
line wrap: on
line diff
--- a/CHANGES.txt Wed Jan 04 19:09:47 2012 +0100 +++ b/CHANGES.txt Thu Jan 05 15:56:15 2012 +0100 @@ -55,6 +55,8 @@ backported version of my proposed changes to email.header.decode_header in http://bugs.python.org/issue1079 (Ralf) +- issue2550711 Fix XSS vulnerability when username contains HTML code, + thanks to Thomas Arendsen Hein for reporting and patch. 2011-07-15: 1.4.19
