view roundup/version_check.py @ 4851:24b8011cd2dc

Fix XSS in issue2550817 Note that the code that triggers that particular bug is no longer in roundup core. But the change to the templates we suggest is a *lot* safer as it always escapes the error and ok messages now. If you are upgrading: you *MUST* read doc/upgrading.txt and do the necessary changes to your templates, the escaping now happens in the template and not in the roundup code. So if you don't make the necessary changes *you are vulnerable*.
author Ralf Schlatterbeck <rsc@runtux.com>
date Fri, 20 Dec 2013 18:24:10 +0100
parents 0c2cad65ebba
children 4566360871dc
line wrap: on
line source

#!/usr/bin/env python

# Roundup requires Python 2.5+ as mentioned in doc\installation.txt
VERSION_NEEDED = (2,5)

import sys
if sys.version_info < VERSION_NEEDED:
    print "Content-Type: text/plain\n"
    print "Roundup requires Python %s.%s or newer." % VERSION_NEEDED
    sys.exit(0)

Roundup Issue Tracker: http://roundup-tracker.org/