Homestyx hydra
Diffusion hydra 02e8a322dc58

Defuse XSS in Calendar
02e8a322dc58
Actions

Description

Defuse XSS in Calendar

Summary: addDetail() takes HTML because we have links there fairly often. :/ This design is iffy.

Test Plan: Reloaded /calendar/status/, verified no XSS.

Reviewers: btrahan, vrana

Reviewed By: vrana

CC: aran

Maniphest Tasks: T139

Differential Revision: https://secure.phabricator.com/D4074

Details

Provenance
epriestleyAuthored on Dec 3 2012, 7:46 PM
sirocylPushed on Oct 16 2024, 5:49 AM
Parents
R1:27785c4f759f: Don't delete tasks attached by freeform fields in Maniphest Tasks field
Branches
Unknown
Tags
Unknown

Event Timeline

Changes (1)

PathSize
src/
applications/
calendar/
controller/

R1:02e8a322dc58

View Options

src/applications/calendar/controller/PhabricatorCalendarViewStatusController.php

Loading...
styx copyright 2020 sirocyl / ellie (kymkdd) / ncommander / styx contributors
Use of other names and brands is not intended to reflect a claim of, or right to, use the name or brand.
styx is an operating system using the Linux kernel and components, and "styx Linux" as a phrase does not reflect the inclusion of the Linux brand or trademark in the styx project.
Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.
Terms and Conditions (TODO: fix this!)