myexperiment-hackers
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[myexperiment-hackers] [3580] trunk/app/views/tags/_tags_form.rhtml: XSS


From: noreply
Subject: [myexperiment-hackers] [3580] trunk/app/views/tags/_tags_form.rhtml: XSS
Date: Mon, 3 Jun 2013 08:27:39 +0000 (UTC)

Revision
3580
Author
fbacall
Date
2013-06-03 08:27:38 +0000 (Mon, 03 Jun 2013)

Log Message

XSS

Modified Paths

Diff

Modified: trunk/app/views/tags/_tags_form.rhtml (3579 => 3580)


--- trunk/app/views/tags/_tags_form.rhtml	2013-05-31 15:05:26 UTC (rev 3579)
+++ trunk/app/views/tags/_tags_form.rhtml	2013-06-03 08:27:38 UTC (rev 3580)
@@ -62,7 +62,7 @@
 	      <div style="padding: 0 1em;">
 		    <% unless (tags = current_user.tags.sort {|a,b| a.name.downcase <=> b.name.downcase }).empty? %>
 					<% tags.each do |t| %>
-			  			<a href=""  t.name %>'); return false;"><%= t.name %></a><span style="color: #999999;"> | </span> 
+			  			<a href=""  h(t.name) %>'); return false;"><%= h(t.name) %></a><span style="color: #999999;"> | </span>
 					<% end %>
 				<% else %>
 					<p><i>You have not tagged anything yet</i></p>

reply via email to

[Prev in Thread] Current Thread [Next in Thread]