Holger Just cb2086f652 [#647] Fix XSS in textile image syntax. ...

Image URLs are not properly escaped in the bundled RedCloth3 library.
It thus allowed an XSS vector.

The patch was adapted from r7570 from Redmine by Etiene Massip. See also
http://www.redmine.org/issues/9245.

2011-10-31 17:22:34 +01:00

..

chili_project

Set source encoding to UTF-8

2011-10-29 14:48:03 +02:00

redmine

[#647] Fix XSS in textile image syntax.

2011-10-31 17:22:34 +01:00

redmine_test.rb

Set source encoding to UTF-8

2011-10-29 14:48:03 +02:00