Mercurial > kallithea
view docs/theme/nature/layout.html @ 7547:a8d873e9cab0
compare: prevent XSS due to unescaped branch/tag/bookmark names
In the revision selection dropdown of the 'Compare' functionality, the
branch/tag/bookmark names were not correctly escaped.
This means that if an attacker is able to push a branch/tag/bookmark
containing HTML/JavaScript in its name, then that code would be evaluated.
This is a cross-site scripting (XSS) vulnerability.
Fix the problem by correctly escaping the branch/tag/bookmarks.
author | Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> |
---|---|
date | Tue, 26 Feb 2019 21:27:42 +0100 |
parents | 60e04a21bf0f |
children | ec4e69a60aae |
line wrap: on
line source
{% extends "basic/layout.html" %} {% block sidebarlogo %} <div style="text-align:center;margin:30px 0;"> <img src="{{pathto('_static/kallithea-logo.svg',1)}}" width="200px"/> </div> <h3>Support Kallithea development</h3> <div style="text-align:center"> <form action="https://www.paypal.com/cgi-bin/webscr" method="post" target="_top"> <input type="hidden" name="cmd" value="_s-xclick"> <input type="hidden" name="hosted_button_id" value="EYXFS3SQPHYUL"> <input type="image" src="https://www.paypalobjects.com/en_US/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal – The safer, easier way to pay online!"> <img alt="" border="0" src="https://www.paypalobjects.com/en_US/i/scr/pixel.gif" width="1" height="1"> </form> <div style="padding:5px"> <a href="https://flattr.com/thing/922714/Donate-to-Software-Freedom-Conservancy" target="_blank"> <img src="http://api.flattr.com/button/flattr-badge-large.png" alt="Flattr this" title="Flattr this" border="0" /></a> </div> </div> {% endblock %}}