]> source.dussan.org Git - gitea.git/commit
projects / gitea.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 21c70e1) | patch
Immediate fix to htmlEncode user added text (#5575)
authortechknowlogick <hello@techknowlogick.com>
Fri, 21 Dec 2018 14:05:47 +0000 (09:05 -0500)
committerGitHub <noreply@github.com>
Fri, 21 Dec 2018 14:05:47 +0000 (09:05 -0500)
commitaf4626a2700aa81ecf4fcf7c81717f6715513526
treeea83a1a1c02f50fd205d7a4ee82ad2a05910e354tree | snapshot
parent21c70e1ed27420646d0d85f044facc8c84be3d5fcommit | diff
Immediate fix to htmlEncode user added text (#5575)

There are likely problems remaining with the way that initCommentForm
is creating its elements. I suspect that a malformed avatar url could
be used maliciously.
public/js/index.js diff | blob | history
Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD: https://github.com/go-gitea/gitea