Bug 503980: show_bug.cgi doesn't properly escape <!-- inside bug summary - Patch…

Bug 503980: show_bug.cgi doesn't properly escape <!-- inside bug summary - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Bug 503980: show_bug.cgi doesn't properly escape <!-- inside bug summary - Patch…
918a8c24 · lpsolit%gmail.com · 7bc9c2e3 · 918a8c24
Commit 918a8c24 authored Aug 10, 2009 by lpsolit%gmail.com
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

Template.pm Bugzilla/Template.pm +1 -0

No files found.
--- a/Bugzilla/Template.pm
+++ b/Bugzilla/Template.pm
@@ -520,6 +520,7 @@ sub create {
                $var =~ s/\n/\\n/g;
                $var =~ s/\r/\\r/g;
                $var =~ s/\@/\\x40/g; # anti-spam for email addresses
+                $var =~ s/</\\x3c/g;
                return $var;
            },