diff options
author | lpsolit%gmail.com <> | 2007-08-23 22:34:38 +0200 |
---|---|---|
committer | lpsolit%gmail.com <> | 2007-08-23 22:34:38 +0200 |
commit | 63e7d4ae05d9eeff9a7d8a2613d8b70012d036fa (patch) | |
tree | ab97f1146edbda3820927674158c70bc31cf2b5c | |
parent | 3aa22eee281d372797eb58a7b970ab2f8b808387 (diff) | |
download | bugzilla-63e7d4ae05d9eeff9a7d8a2613d8b70012d036fa.tar.gz bugzilla-63e7d4ae05d9eeff9a7d8a2613d8b70012d036fa.tar.xz |
Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=LpSolit
-rw-r--r-- | template/en/default/bug/create/create-guided.html.tmpl | 2 | ||||
-rw-r--r-- | template/en/default/filterexceptions.pl | 1 |
2 files changed, 1 insertions, 2 deletions
diff --git a/template/en/default/bug/create/create-guided.html.tmpl b/template/en/default/bug/create/create-guided.html.tmpl index d60167de0..6953c84ef 100644 --- a/template/en/default/bug/create/create-guided.html.tmpl +++ b/template/en/default/bug/create/create-guided.html.tmpl @@ -283,7 +283,7 @@ function PutDescription() { <b>Build Identifier</b> </td> <td valign="top"> - <input type="text" size="80" name="buildid" value="[% buildid %]"> + <input type="text" size="80" name="buildid" value="[% buildid FILTER html %]"> <p> This should identify the exact version of the product you were using. If the above field is blank or you know it is incorrect, copy the diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl index 73d42224a..93305c1c8 100644 --- a/template/en/default/filterexceptions.pl +++ b/template/en/default/filterexceptions.pl @@ -385,7 +385,6 @@ 'bug/create/create-guided.html.tmpl' => [ 'matches.0', 'tablecolour', - 'buildid', 'sel', 'productstring', ], |