diff options
| author | Frédéric Buclin <LpSolit@gmail.com> | 2012-01-06 00:58:18 +0100 |
|---|---|---|
| committer | Frédéric Buclin <LpSolit@gmail.com> | 2012-01-06 00:58:18 +0100 |
| commit | e5f4701b8a61c7f3eada35942a4850eb781fee7a (patch) | |
| tree | b63cade7a6ec652fae20a473bbc9deb04e40ff47 /template/en/default/global | |
| parent | 3d226093858bc6b927b2eb74163dcdd26aa14650 (diff) | |
| download | bugzilla-e5f4701b8a61c7f3eada35942a4850eb781fee7a.tar.gz bugzilla-e5f4701b8a61c7f3eada35942a4850eb781fee7a.tar.xz | |
Bug 714664: The content of the "emailregexpdesc" parameter is not escaped when displayed to the user
r=dkl a=LpSolit
Diffstat (limited to 'template/en/default/global')
| -rw-r--r-- | template/en/default/global/code-error.html.tmpl | 2 | ||||
| -rw-r--r-- | template/en/default/global/user-error.html.tmpl | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/template/en/default/global/code-error.html.tmpl b/template/en/default/global/code-error.html.tmpl index 70a345984..5dce16976 100644 --- a/template/en/default/global/code-error.html.tmpl +++ b/template/en/default/global/code-error.html.tmpl @@ -46,7 +46,7 @@ A legal address must contain exactly one '@', and at least one '.' after the @. [% ELSE %] - [%+ Param('emailregexpdesc') %] + [%+ Param('emailregexpdesc') FILTER html_light %] [% END %] It must also not contain any of these special characters: <tt>\ ( ) & < > , ; : " [ ]</tt>, or any whitespace. diff --git a/template/en/default/global/user-error.html.tmpl b/template/en/default/global/user-error.html.tmpl index 52dd32297..723f92042 100644 --- a/template/en/default/global/user-error.html.tmpl +++ b/template/en/default/global/user-error.html.tmpl @@ -849,7 +849,7 @@ A legal address must contain exactly one '@', and at least one '.' after the @. [% ELSE %] - [%+ Param('emailregexpdesc') %] + [%+ Param('emailregexpdesc') FILTER html_light %] [% END %] It must also not contain any of these special characters: <tt>\ ( ) & < > , ; : " [ ]</tt>, or any whitespace. |