phpGroupWare - Bugs: bug #14457, Fixing XSS border side effects in...
You are not allowed to post comments on this tracker with your current authentication level.
bug #14457: Fixing XSS border side effects in etemplate editor
Submitter: | Caeies <Caeies> | ||
Submitted: | Wed 07 Sep 2005 01:14:26 PM UTC | ||
Category: | eTemplates | Item Group: | 0.9.16.008 |
Severity: | 4 - Important | Priority: | 7 - High |
Status: | None | Privacy: | Public |
Assigned to: | Caeies | Open/Closed: | Open |
Component Version: | SVN | Operating System: | None |
Reproducibility: | None | Planned Release: | 0.9.16.011+ |
Fixed Release: |
Attached Files
file #3457: etemplate.diff added by Caeies (669B - text/x-patch - patch for allowing XSS by devs (and only them) in etemplate)
Depends on the following items: None found
Items that depend on this one: None found
CC list is empty
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follows 1 latest change.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2005-09-07 | Caeies | Attached File | - | Added etemplate.diff, #2924 |
Powered by Savane 3.13-758e.
Corresponding source code
Hi,
Just for reviewing of the patch and discussion :
In case of etemplate, the $_POST is replaced by $GLOBALS['RAW_REQUEST'] ... so dev users building template are not too impacted by the strips ...
Of course this is a short term solution, the best would be to fix etemplate completly :)
Regards,
Caeies