forgejo/templates/repo/issue/view_content
Gusted fe2df46d05
[SECURITY] Fix XSS in dismissed review
- It's possible for reviews to not be assiocated with users, when they
were migrated from another forge instance. In the migration code,
there's no sanitization check for author names, so they could contain
HTML tags and thus needs to be properely escaped.
- Pass `$reviewerName` trough `Escape`.
2024-02-22 15:04:36 +01:00
..
add_reaction.tmpl Improve and fix bugs surrounding reactions (#24760) 2023-05-28 01:34:18 +00:00
attachments.tmpl Backport ctx locale refactoring manually (#27231) (#27259) (#27260) 2023-09-25 13:15:51 +00:00
comments.tmpl [SECURITY] Fix XSS in dismissed review 2024-02-22 15:04:36 +01:00
comments_delete_time.tmpl Backport ctx locale refactoring manually (#27231) (#27259) (#27260) 2023-09-25 13:15:51 +00:00
context_menu.tmpl Revert "[GITEA] Make reference URL absolute" 2024-01-16 13:42:39 +00:00
conversation.tmpl [BUG] split code conversations in diff tab (#2306) 2024-02-16 14:06:43 +01:00
pull.tmpl Restore warning commit status (#27504) (#27529) 2023-10-09 11:56:02 +08:00
pull_merge_instruction.tmpl cleanup locale function usage (#27227) (#27240) 2023-09-25 00:21:38 +00:00
reactions.tmpl Backport ctx locale refactoring manually (#27231) (#27259) (#27260) 2023-09-25 13:15:51 +00:00
reference_issue_dialog.tmpl Backport ctx locale refactoring manually (#27231) (#27259) (#27260) 2023-09-25 13:15:51 +00:00
show_role.tmpl Add member, collaborator, contributor, and first-time contributor roles and tooltips (#26658) 2023-08-24 13:06:17 +08:00
sidebar.tmpl Refactor template empty checks (#28351) (#28354) 2023-12-08 13:41:16 +01:00
update_branch_by_merge.tmpl Backport ctx locale refactoring manually (#27231) (#27259) (#27260) 2023-09-25 13:15:51 +00:00