2012-12-14 - Re: [GRASE-Hotspot] #92: Form input fields need escaping for display

Header Data

From: GRASE Trac <tr***c@grasehotspot.org>
Message Hash: 08503a90159dc6247e42d57ec756a6fe32c690ac55dc022003de1d3444d12b11
Message ID: <054.0f16aa8ca64c4fff41190a453ed0b22c@grasehotspot.org>
Reply To: <039.10de8327fd5265d28e266858dec31e4d@grasehotspot.org>
UTC Datetime: 2012-12-14 16:42:17 UTC
Raw Date: Fri, 14 Dec 2012 23:42:17 -0000

Raw message 

#92: Form input fields need escaping for display
------------------------------+----------------------
  Reporter:  tim              |      Owner:  tim
      Type:  defect           |     Status:  accepted
  Priority:  major            |  Milestone:  3.8
 Component:  Admin Interface  |    Version:  3.7
Resolution:                   |   Keywords:
------------------------------+----------------------
Changes (by tim):

 * status:  new => accepted


Comment:

 This includes any time we build a url, we need |escape:'url' for all
 variables (might also be good to not allow some of those chars in things
 like username?

-- 
Ticket URL: <http://trac.grasehotspot.org/ticket/92#comment:1>
GRASE Hotspot <http://grasehotspot.org/>
GRASE Hotspot bug tracker

Thread