revi-archive/phorge-phorge
1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-11-18 21:02:41 +01:00
Code Issues Releases Wiki Activity

Fix XSS in path names of inline comment list.

Browse source
This commit is contained in:
epriestley 2011-04-11 20:24:33 -07:00
parent 85cc13b607
commit 1bba2c9913
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/applications/differential/view/revisioncomment/DifferentialRevisionCommentView.php
View file

@ -119,7 +119,7 @@ final class DifferentialRevisionCommentView extends AphrontView {
$inline_render[] =
'<tr>'.
'<th colspan="2">'.
$changeset->getFileName().
phutil_escape_html($changeset->getFileName()).
'</th>'.
'</tr>';
foreach ($inlines as $inline) {