From 0ca55bd31d48436feabd6ad474eb2900c937e768 Mon Sep 17 00:00:00 2001
From: "justdave%syndicomm.com" <>
Date: Thu, 18 Sep 2003 05:12:56 +0000
Subject: Bug 219216: Javascript improperly using FILTER html instead of FILTER
 js causing data with @ produced by javascript to show up as &#64; r=timeless,
 a=justdave

---
 Bugzilla/Template.pm | 1 +
 1 file changed, 1 insertion(+)

(limited to 'Bugzilla/Template.pm')

diff --git a/Bugzilla/Template.pm b/Bugzilla/Template.pm
index f3e3685f7..f9342e11f 100644
--- a/Bugzilla/Template.pm
+++ b/Bugzilla/Template.pm
@@ -194,6 +194,7 @@ sub create {
                 $var =~ s/([\\\'\"])/\\$1/g;
                 $var =~ s/\n/\\n/g;
                 $var =~ s/\r/\\r/g;
+                $var =~ s/\@/\\x40/g; # anti-spam for email addresses
                 return $var;
             },
 
-- 
cgit v1.2.3-24-g4f1b