diff options
| author | 8chan <admin@8chan.co> | 2015-01-23 02:29:55 -0800 |
|---|---|---|
| committer | 8chan <admin@8chan.co> | 2015-01-23 10:40:08 +0000 |
| commit | a550c63f9c896ddba236d9136998a858c233b492 (patch) | |
| tree | 00a8bf500c5825ba61c47e597e4f63f1dd290e80 /install.sql | |
| parent | f4422e597b5c5a1f0c8b921bd7027cd8d3c04f83 (diff) | |
SECURITY / XSS : Stop XSS in post subjects displayed in catalog
git blame says czaks forgot an |e in catalog.html, this means that anyone posting a new thread with HTML in the subject field or name field can arbitrarily insert it into the page.
Conflicts:
templates/themes/catalog/catalog.html
Diffstat (limited to 'install.sql')
0 files changed, 0 insertions, 0 deletions