Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 790296 (CVE-2012-4189): [SECURITY] Field values are not escaped correctly in tabular reports

Browse Source 
r=dkl a=LpSolit


git-svn-id: svn://10.0.0.236/trunk@264428 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
mkanat%bugzilla.org
2012-11-13 18:01:31 +00:00
parent 62cd1cab9a
commit 29457cb04b
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
mozilla/webtools/bugzilla/.bzrrev
View File

@@ -1 +1 @@
8469
8470

2
mozilla/webtools/bugzilla/report.cgi
View File

@@ -387,5 +387,5 @@ sub get_field_restrictions {
my $field = shift;
my $cgi = Bugzilla->cgi;
return join('&', map {"$field=$_"} $cgi->param($field));
return join('&', map {url_quote($field) . '=' . url_quote($_)} $cgi->param($field));
}

2
mozilla/webtools/bugzilla/template/en/default/reports/report-table.html.tmpl
View File

@@ -85,7 +85,7 @@ YAHOO.util.Event.addListener(window, "load", function() {
var myColumnDefs = [
{key:"row_title", label:"", sortable:true, sortOptions: { sortFunction:totalNumberSorter }},
[% FOREACH col = col_names %]
{key:"[% col FILTER js %]", label:"[% display_value(col_field, col) FILTER js %]", sortable:true,
{key:"[% col FILTER js %]", label:"[% display_value(col_field, col) FILTER html FILTER js %]", sortable:true,
formatter:this.Linkify, sortOptions: { defaultDir: YAHOO.widget.DataTable.CLASS_DESC, sortFunction:totalNumberSorter }},
[% END %]
{key:"total", label:"Total", sortable:true, formatter:this.LinkifyTotal,