Review Request 109905: Bugzilla filter: escape html to block injection.

[David Edmundson]

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
http://git.reviewboard.kde.org/r/109905/#review30639
-----------------------------------------------------------

Ship it!


Ship It!

- David Edmundson


On April 8, 2013, 1:06 a.m., Nikita Skovoroda wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> http://git.reviewboard.kde.org/r/109905/
> -----------------------------------------------------------
> 
> (Updated April 8, 2013, 1:06 a.m.)
> 
> 
> Review request for Telepathy and David Edmundson.
> 
> 
> Description
> -------
> 
> Bugzilla filter: escape html to block injection.
> BUG: 317936.
>     
> Also, fix a "not an object" js error when referencing an inexisting bug (and got a null result).
> 
> 
> This addresses bug 317936.
>     http://bugs.kde.org/show_bug.cgi?id=317936
> 
> 
> Diffs
> -----
> 
>   filters/bugzilla/showBugzillaInfo.js 1906257 
> 
> Diff: http://git.reviewboard.kde.org/r/109905/diff/
> 
> 
> Testing
> -------
> 
> Works.
> No injection now.
> No «not an object» errors in Inspector for inexisting bugs now.
> 
> 
> Thanks,
> 
> Nikita Skovoroda
> 
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kde-telepathy/attachments/20130408/a4638ce9/attachment.html>