Item14069: fix XSS (javascript injection) vulnerability in attach #9
Conversation
|
Ray, I'm going to cherry-pick these fixes into the release instead of merging. One of the commit messages has a typo in the task. This will be cleaner. |
|
Manually merged. Also moved the Test into the test/unit directory. |
|
Sounds good. thanks! --Ray From: George Clark notifications@github.com Ray, I'm going to cherry-pick these fixes into the release instead of merging. One of the commit messages has a typo in the task. This will be cleaner. You are receiving this because you authored the thread. |
This pull request addresses Item14069 ("Attach filename parameter vulnerable to cross-site scripting"). It includes the fix in
Foswiki::UI::Attach.pmand a unit test to detect the vulnerability.