From 918a8c245f8d0d7d0926a015aa9a4940c14ebdd3 Mon Sep 17 00:00:00 2001
From: "lpsolit%gmail.com" <>
Date: Mon, 10 Aug 2009 20:20:25 +0000
Subject: Bug 503980: show_bug.cgi doesn't properly escape <!-- inside bug
 summary - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Bugzilla/Template.pm | 1 +
 1 file changed, 1 insertion(+)

(limited to 'Bugzilla')

diff --git a/Bugzilla/Template.pm b/Bugzilla/Template.pm
index f90e472b5..49954a521 100644
--- a/Bugzilla/Template.pm
+++ b/Bugzilla/Template.pm
@@ -520,6 +520,7 @@ sub create {
                 $var =~ s/\n/\\n/g;
                 $var =~ s/\r/\\r/g;
                 $var =~ s/\@/\\x40/g; # anti-spam for email addresses
+                $var =~ s/</\\x3c/g;
                 return $var;
             },
             
-- 
cgit v1.2.3-24-g4f1b