Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • fusiondirectory-plugins fusiondirectory-plugins
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 50
    • Issues 50
    • List
    • Boards
    • Service Desk
    • Milestones
  • Deployments
    • Deployments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • fusiondirectoryfusiondirectory
  • fusiondirectory-pluginsfusiondirectory-plugins
  • Issues
  • #2140
Closed
Open
Issue created Mar 18, 2013 by bmortier@bmortierMaintainer

the template don't escape the html inside itself

Hello,

the template system doesn't escape the html inside itself, it can be dangerous and a security problem, that should be fixed

Cheers

(from redmine: issue id 2140, created on 2013-03-18, closed on 2013-04-17)

  • Changesets:
    • Revision bcc24281 by Côme Chilliet on 2013-03-18T15:16:12.000Z:
Fixes: #2140 the template don't escape the html inside itself
  • Custom Fields:
    • Bug in version: 1.0.5
  • Uploads:
    • 0001-Fixes-2140-the-template-don-t-escape-the-html-inside.patch
Assignee
Assign to
Time tracking