Commit bab22fe
committed
Fix XSS in Changesets List page
Backported from ff7d7b65201738eab597691021b4faae5b92d7df.
Changes in repo_manage_page.php are not applicable, as the 1.x code
relies on var_dump() to display the repository config, and is therefore
not vulnerable to the same XSS attack vector.
Fixes #286
Conflicts:
Source/pages/list.php
Source/pages/repo_manage_page.php1 parent cf5b0da commit bab22fe
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
26 | 26 | | |
27 | 27 | | |
28 | 28 | | |
29 | | - | |
| 29 | + | |
30 | 30 | | |
31 | 31 | | |
32 | 32 | | |
| |||
0 commit comments