Mercurial > p > roundup > code
view doc/index.txt @ 8365:4ac0bbb3e440
bug(security): CVE-2025-53865 - XSS bug
Extensive fixes in devel, responsive templates known to be
exploitable.
Similar constructs in classic and minimal templates not known
to be exploitable, but changed anyway.
doc/upgrading.txt:
Reformat to 66 characters.
Update with assigned CVE number.
Add section on fixing tal:replace with unsafe data.
Document analysis and assumptions in comment in file.
doc/security.txt:
Update with CVE number.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Fri, 11 Jul 2025 19:30:27 -0400 |
| parents | 3f43db05aa11 |
| children |
line wrap: on
line source
.. meta:: :description: Table of contents for documentation on the Roundup Issue Tracker. ======================================================= Roundup: an Issue-Tracking System for Knowledge Workers ======================================================= For how to contact the community see https://www.roundup-tracker.org . Contents ======== .. toctree:: :maxdepth: 2 :includehidden: features installation upgrading security FAQ user_guide customising <customizing.txt> rest xmlrpc reference glossary admin_guide man pages <man_pages> license acknowledgements upgrading-history tracker_templates Design Overview <overview> Design (original) <design> Software Carpentry and Papers <sc> developers Notes about the MySQL Database backend <mysql> Notes about the PostgreSQL Database backend <postgresql> Richard Jones implementation notes <implementation> security-history .. toctree:: :hidden: pydoc See: https://wiki.roundup-tracker.org/ReleaseErrata for fixes to documentation. Indices ======= * :ref:`genindex`
