summaryrefslogtreecommitdiffstats
path: root/Bugzilla
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2009-08-10 22:20:25 +0200
committerlpsolit%gmail.com <>2009-08-10 22:20:25 +0200
commit918a8c245f8d0d7d0926a015aa9a4940c14ebdd3 (patch)
tree70e25946c932f933c1b3bf7c6e86382b0a0c5969 /Bugzilla
parent7bc9c2e3da4e735b7ca2f35c503a332f681f66d5 (diff)
downloadbugzilla-918a8c245f8d0d7d0926a015aa9a4940c14ebdd3.tar.gz
bugzilla-918a8c245f8d0d7d0926a015aa9a4940c14ebdd3.tar.xz
Bug 503980: show_bug.cgi doesn't properly escape <!-- inside bug summary - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
Diffstat (limited to 'Bugzilla')
-rw-r--r--Bugzilla/Template.pm1
1 files changed, 1 insertions, 0 deletions
diff --git a/Bugzilla/Template.pm b/Bugzilla/Template.pm
index f90e472b5..49954a521 100644
--- a/Bugzilla/Template.pm
+++ b/Bugzilla/Template.pm
@@ -520,6 +520,7 @@ sub create {
$var =~ s/\n/\\n/g;
$var =~ s/\r/\\r/g;
$var =~ s/\@/\\x40/g; # anti-spam for email addresses
+ $var =~ s/</\\x3c/g;
return $var;
},