Mercurial > p > roundup > code
diff CHANGES.txt @ 4578:941681fec1b0
issue2550711 Fix XSS vulnerability in @action parameter.
thanks to "om" for reporting.
Also fix issue number of previous change-entry.
| author | Ralf Schlatterbeck <rsc@runtux.com> |
|---|---|
| date | Thu, 05 Jan 2012 16:22:27 +0100 |
| parents | 528fe0a3af24 |
| children | ba4c632143f6 |
line wrap: on
line diff
--- a/CHANGES.txt Thu Jan 05 15:56:15 2012 +0100 +++ b/CHANGES.txt Thu Jan 05 16:22:27 2012 +0100 @@ -55,8 +55,10 @@ backported version of my proposed changes to email.header.decode_header in http://bugs.python.org/issue1079 (Ralf) -- issue2550711 Fix XSS vulnerability when username contains HTML code, +- issue2550684 Fix XSS vulnerability when username contains HTML code, thanks to Thomas Arendsen Hein for reporting and patch. +- issue2550711 Fix XSS vulnerability in @action parameter, + thanks to "om" for reporting. 2011-07-15: 1.4.19
