Mercurial > p > roundup > code
view website/issues/html/query.item.html @ 4577:528fe0a3af24
issue2550711 Fix XSS vulnerability when username contains HTML code.
Thanks to Thomas Arendsen Hein for reporting and patch.
| author | Ralf Schlatterbeck <rsc@runtux.com> |
|---|---|
| date | Thu, 05 Jan 2012 15:56:15 +0100 |
| parents | c2d0d3e9099d |
| children | 578b5294e888 |
line wrap: on
line source
<!-- query.item --> <span tal:replace="structure context/renderQueryForm" />