]> git.mxchange.org Git - quix0rs-gnu-social.git/commit
XSS vulnerability when remote-subscribing
authorMikael Nordfeldth <mmn@hethane.se>
Tue, 5 Jan 2016 11:15:50 +0000 (12:15 +0100)
committerMikael Nordfeldth <mmn@hethane.se>
Tue, 5 Jan 2016 11:15:50 +0000 (12:15 +0100)
commitab93bb009c8533c8847aafe76ba9774d9d74e7ca
treed84cb9ce3f1e0c7b1373383763f992170e802502
parentdf8c14d66a7b46a07beabc34a2c50493036db1c8
XSS vulnerability when remote-subscribing

->raw was used on non-filtered strings for some reasons, changed
to ->text.
plugins/OStatus/actions/ostatussub.php