Bug 503980: show_bug.cgi doesn't properly escape <!-- inside bug summary - Patch by FrÃ©dÃ©ric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

git-svn-id: svn://10.0.0.236/trunk@258038 18797224-902f-48f8-a5cc-f745e15eee43
2009-08-10 20:22:38 +00:00 · 2009-08-10 20:22:38 +00:00 · 1e4aaee2be
commit 1e4aaee2be
parent a390eb7e42
1 changed files with 1 additions and 0 deletions
--- a/mozilla/webtools/bugzilla/Bugzilla/Template.pm
+++ b/mozilla/webtools/bugzilla/Bugzilla/Template.pm
@ -520,6 +520,7 @@ sub create {
                $var =~ s/\n/\\n/g;
                $var =~ s/\r/\\r/g;
                $var =~ s/\@/\\x40/g; # anti-spam for email addresses
+                $var =~ s/</\\x3c/g;
                return $var;
            },