Mercurial > p > roundup > code
view website/issues/html/_generic.404.html @ 4577:528fe0a3af24
issue2550711 Fix XSS vulnerability when username contains HTML code.
Thanks to Thomas Arendsen Hein for reporting and patch.
| author | Ralf Schlatterbeck <rsc@runtux.com> |
|---|---|
| date | Thu, 05 Jan 2012 15:56:15 +0100 |
| parents | c2d0d3e9099d |
| children | 8d595c5486c0 |
line wrap: on
line source
<html> <head> <title>Item Not Found</title> </head> <body> There is no <span tal:content="context/_classname" /> with id <span tal:content="context/id"/> </body> </html>