summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2007-08-23 22:34:38 +0200
committerlpsolit%gmail.com <>2007-08-23 22:34:38 +0200
commit63e7d4ae05d9eeff9a7d8a2613d8b70012d036fa (patch)
treeab97f1146edbda3820927674158c70bc31cf2b5c
parent3aa22eee281d372797eb58a7b970ab2f8b808387 (diff)
downloadbugzilla-63e7d4ae05d9eeff9a7d8a2613d8b70012d036fa.tar.gz
bugzilla-63e7d4ae05d9eeff9a7d8a2613d8b70012d036fa.tar.xz
Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=LpSolit
-rw-r--r--template/en/default/bug/create/create-guided.html.tmpl2
-rw-r--r--template/en/default/filterexceptions.pl1
2 files changed, 1 insertions, 2 deletions
diff --git a/template/en/default/bug/create/create-guided.html.tmpl b/template/en/default/bug/create/create-guided.html.tmpl
index d60167de0..6953c84ef 100644
--- a/template/en/default/bug/create/create-guided.html.tmpl
+++ b/template/en/default/bug/create/create-guided.html.tmpl
@@ -283,7 +283,7 @@ function PutDescription() {
<b>Build Identifier</b>
</td>
<td valign="top">
- <input type="text" size="80" name="buildid" value="[% buildid %]">
+ <input type="text" size="80" name="buildid" value="[% buildid FILTER html %]">
<p>
This should identify the exact version of the product you were using.
If the above field is blank or you know it is incorrect, copy the
diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl
index 73d42224a..93305c1c8 100644
--- a/template/en/default/filterexceptions.pl
+++ b/template/en/default/filterexceptions.pl
@@ -385,7 +385,6 @@
'bug/create/create-guided.html.tmpl' => [
'matches.0',
'tablecolour',
- 'buildid',
'sel',
'productstring',
],