diff CHANGES.txt @ 4578:941681fec1b0

issue2550711 Fix XSS vulnerability in @action parameter. thanks to "om" for reporting. Also fix issue number of previous change-entry.
author Ralf Schlatterbeck <rsc@runtux.com>
date Thu, 05 Jan 2012 16:22:27 +0100
parents 528fe0a3af24
children ba4c632143f6
line wrap: on
line diff
--- a/CHANGES.txt	Thu Jan 05 15:56:15 2012 +0100
+++ b/CHANGES.txt	Thu Jan 05 16:22:27 2012 +0100
@@ -55,8 +55,10 @@
   backported version of my proposed changes to
   email.header.decode_header in http://bugs.python.org/issue1079
   (Ralf)
-- issue2550711 Fix XSS vulnerability when username contains HTML code,
+- issue2550684 Fix XSS vulnerability when username contains HTML code,
   thanks to Thomas Arendsen Hein for reporting and patch.
+- issue2550711 Fix XSS vulnerability in @action parameter,
+  thanks to "om" for reporting.
 
 
 2011-07-15: 1.4.19

Roundup Issue Tracker: http://roundup-tracker.org/