MantisBT: master 403cd6c1

Diff Back to Repository
Author Committer Branch Timestamp Parent
dhx dhx master 2009-12-01 04:49 master 98f63cf5
Affected Issues  0011247: XSS in various management pages due to unsanitised project names
Changeset

Fix 0011247: XSS in various management pages (project names)

A project name containing "<script>alert(42);</script>" would result in
XSS vulnerabilities in adm_config_report.php and
manage_custom_field_edit_page.php due to unsanitised project names being
printed directly to HTML output.
mod - adm_config_report.php Diff File
mod - core/print_api.php Diff File