Bug #63321
closedAdd missing htmlspecialchars() or quoteJSvalue()
100%
Description
A quick search showed that proper escaping ("just to be save") is missing in several places.
Updated by Gerrit Code Review almost 10 years ago
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/34603
Updated by Gerrit Code Review almost 10 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/34603
Updated by Stefan Neufeind almost 10 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset b167bb90aab862540fdb8172376acebaab5af226.
Updated by Gerrit Code Review almost 10 years ago
- Status changed from Resolved to Under Review
Patch set 1 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/34740
Updated by Gerrit Code Review almost 10 years ago
Patch set 2 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/34740
Updated by Stefan Neufeind almost 10 years ago
- Status changed from Under Review to Resolved
Applied in changeset 072a505cf6b64b052da74e58141fc0049b576d32.