Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SECURITY: Fix #5565 by htmlEncoding titles in issues and milestones #5570

Merged
merged 2 commits into from
Dec 21, 2018
Merged

SECURITY: Fix #5565 by htmlEncoding titles in issues and milestones #5570

merged 2 commits into from
Dec 21, 2018

Commits on Dec 20, 2018

  1. Immediate fix to htmlEncode user added text 

    There are likely problems remaining with the way that initCommentForm
is creating its elements. I suspect that a malformed avatar url could
be used maliciously.
    @zeripath
    zeripath committed Dec 20, 2018
    Configuration menu
    Copy the full SHA
    2478376 View commit details
    Browse the repository at this point in the history

Commits on Dec 21, 2018

  1. Merge branch 'master' into issue-5565-fix-xss-issues-and-milestones

    @lunny
    lunny authored Dec 21, 2018
    Configuration menu
    Copy the full SHA
    30a6059 View commit details
    Browse the repository at this point in the history