Apache Allura™

Forge software for hosting software projects

Brought to you by: alexluberg, brondsem, deshani, dill0wn, and 10 others

#8315 XSS when adding another user to a project

Milestone: v1.11.1

Status: closed

Owner: nobody

Labels: None

Component: General

Reviewer: nobody

Updated: 2019-07-16

Created: 2019-07-10

Creator: Dave Brondsema

Private: No

When adding a user to a project, the user's display name is not escaped.

Discussion

Dave Brondsema - 2019-07-10

status: open --> review
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dave Brondsema - 2019-07-10

Fixed on db/8315

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Kenton Taylor - 2019-07-10

status: review --> closed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dave Brondsema - 2019-07-15

Milestone: unreleased --> v1.11.1
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Dave Brondsema - 2019-07-16

private: Yes --> No
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.