Skip to content

Commit

Permalink
Fix XSS in Changesets List page
Browse files Browse the repository at this point in the history
Backported from ff7d7b65201738eab597691021b4faae5b92d7df.

Changes in repo_manage_page.php are not applicable, as the 1.x code
relies on var_dump() to display the repository config, and is therefore
not vulnerable to the same XSS attack vector.

Fixes #286

Conflicts:
	Source/pages/list.php
	Source/pages/repo_manage_page.php
  • Loading branch information
dregad committed Sep 1, 2018
1 parent cf5b0da commit bab22fe
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion Source/pages/list.php
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@

<div class="table-container">

<h2><?php echo plugin_lang_get( 'changesets' ), ': ', $t_repo->name ?></h2>
<h2><?php echo plugin_lang_get( 'changesets' ), ': ', string_display_line( $t_repo->name ) ?></h2>

<div class="right">
<?php
Expand Down

0 comments on commit bab22fe

Please sign in to comment.