mirrors
/
forgejo
mirror of
1
Fork 0
Code Issues Releases Activity
forgejo/templates/repo/issue
History
Gusted 4fdd0ed728
[SECURITY] Fix XSS in dismissed review 
- It's possible for reviews to not be assiocated with users, when they
were migrated from another forge instance. In the migration code,
there's no sanitization check for author names, so they could contain
HTML tags and thus needs to be properely escaped.
- Pass `$reviewerName` trough `Escape`.

(cherry picked from commit fe2df46d05)

Conflicts:
	templates/repo/issue/view_content/comments.tmpl
	trivial context conflict
 		2024-02-22 22:44:22 +01:00
..
fields Make issue template field template access correct template data (#26698) (#26709) 2023-09-08 08:07:19 +02:00
labels Several fixes for mobile UI (#25634) (#25689) 2023-07-07 00:34:00 +02:00
milestone Improve dropdown menus, remove inline styles (#24954) 2023-05-29 14:10:06 +00:00
view_content [SECURITY] Fix XSS in dismissed review 2024-02-22 22:44:22 +01:00
branch_selector_field.tmpl Use flex to align SVG and text (#25163) (#25260) 2023-06-14 13:21:48 -04:00
choose.tmpl Implement Issue Config (#20956) 2023-03-28 14:22:07 -04:00
comment_tab.tmpl Improve markdown editor: width, height, preferred (#23895) 2023-04-07 13:03:29 -04:00
label_precolors.tmpl Fix purple color in suggested label colors (#18241) 2022-01-11 12:11:40 -06:00
labels.tmpl Button and color enhancements (#24989) (#25176) 2023-06-11 02:13:08 +00:00
list.tmpl Fix label list divider (#25312) (#25372) 2023-06-19 18:14:31 +00:00
milestone_issues.tmpl Various UI fixes (#25264) (#25431) 2023-06-22 10:19:38 +00:00
milestone_new.tmpl Add main landmark to templates and adjust titles (#22670) 2023-02-01 22:56:10 +00:00
milestones.tmpl Fix milestones deletion (#25583) (#25584) 2023-06-29 08:52:05 +00:00
navbar.tmpl Fix UI on mobile view (#25315) (#25340) 2023-06-18 13:02:41 +00:00
new.tmpl Make Issue/PR/projects more compact, misc CSS tweaks (#24459) 2023-05-03 17:58:59 -04:00
new_form.tmpl Fix incorrect "tabindex" attributes (#26733) (#26734) 2023-09-08 08:07:19 +02:00
openclose.tmpl Make Issue/PR/projects more compact, misc CSS tweaks (#24459) 2023-05-03 17:58:59 -04:00
search.tmpl Fix UI on mobile view (#25315) (#25340) 2023-06-18 13:02:41 +00:00
view.tmpl Make Issue/PR/projects more compact, misc CSS tweaks (#24459) 2023-05-03 17:58:59 -04:00
view_content.tmpl Button and color enhancements (#24989) (#25176) 2023-06-11 02:13:08 +00:00
view_title.tmpl Show correct naming for 1 comment (#25704) (#25712) 2023-07-06 16:04:13 +00:00