urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix XSS in openid selector. Thanks, Raghav Bisht.

master
Joey Hess 2015-03-27 12:17:39 -04:00
parent 2940fe5334
commit 18dfba868f
3 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
debian/changelog vendored
View File

@ -13,6 +13,9 @@ ikiwiki (3.20150108) UNRELEASED; urgency=medium
* t/inline.t: accept translations of "Add a new post titled:"
(Closes: #779365)
[ Joey Hess ]
* Fix XSS in openid selector. Thanks, Raghav Bisht.
-- Joey Hess <id@joeyh.name> Sat, 24 Jan 2015 23:59:20 -0400
ikiwiki (3.20150107) experimental; urgency=medium

4
doc/bugs/XSS_Alert...__33____33____33__.html
View File

@ -23,3 +23,7 @@ Thank You...!!
Your Faithfully,
Raghav Bisht
raghav007bisht@gmail.com
> Thanks Raghav for reporting this issue. I've fixed it in ikiwiki.
>
> --[[Joey]]

2
templates/openid-selector.tmpl
View File

@ -23,7 +23,7 @@ $(document).ready(function() {
</div>
<div id="openid_input_area">
<label for="openid_identifier" class="block">Enter your OpenID:</label>
<input id="openid_identifier" name="openid_identifier" type="text" value="<TMPL_VAR OPENID_URL>"/>
<input id="openid_identifier" name="openid_identifier" type="text" value="<TMPL_VAR ESCAPE=HTML OPENID_URL>"/>
<input id="openid_submit" type="submit" value="Login"/>
</div>
<TMPL_IF OPENID_ERROR>