Apache Allura™

Forge software for hosting software projects

Brought to you by: alexluberg, brondsem, ccruz, deshani, and 11 others

#8255 Escape html on wiki & blog diff views

Milestone: v1.10.0

Status: closed

Owner: Dave Brondsema

Labels: security (36)

Component: General

Reviewer: Kenton Taylor

Updated: 2018-10-30

Created: 2018-10-26

Creator: Dave Brondsema

Private: No

The code that generates diffs for the revision history viewing on blog posts & wiki pages, does not escape HTML.

Discussion

Dave Brondsema - 2018-10-26

status: in-progress --> closed

Reviewer: Kenton Taylor
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dave Brondsema - 2018-10-30

private: Yes --> No
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dave Brondsema - 2018-10-30

Milestone: unreleased --> v1.10.0
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.