From f8aa20925c5b7cc83fa1936a23ed970efba80984 Mon Sep 17 00:00:00 2001 From: Frédéric Buclin Date: Tue, 19 Feb 2013 18:27:50 +0100 Subject: Bug 842038: (CVE-2013-0785) [SECURITY] XSS in show_bug.cgi when using an invalid page format r=glob a=LpSolit --- Bugzilla/Template.pm | 1 + 1 file changed, 1 insertion(+) (limited to 'Bugzilla/Template.pm') diff --git a/Bugzilla/Template.pm b/Bugzilla/Template.pm index 663d85957..cd7507963 100644 --- a/Bugzilla/Template.pm +++ b/Bugzilla/Template.pm @@ -140,6 +140,7 @@ sub get_format { return { 'template' => $template, + 'format' => $format, 'extension' => $ctype, 'ctype' => Bugzilla::Constants::contenttypes->{$ctype} }; -- cgit v1.2.3-24-g4f1b