Defuse XSS in Calendar
02e8a322dc58
Actions

Authored by epriestley <git@epriestley.com> on Dec 4 2012, 01:46.

Description

Defuse XSS in Calendar

Summary: addDetail() takes HTML because we have links there fairly often. :/ This design is iffy.

Test Plan: Reloaded /calendar/status/, verified no XSS.

Reviewers: btrahan, vrana

Reviewed By: vrana

CC: aran

Maniphest Tasks: T139

Committed

epriestley <git@epriestley.com>

Dec 4 2012, 01:46

Pushed

aubort

Jan 31 2017, 17:16

Parents

Branches

Unknown

Tags

Unknown

epriestley <git@epriestley.com> committed rPH02e8a322dc58: Defuse XSS in Calendar (authored by epriestley <git@epriestley.com>).Dec 4 2012, 01:46

				Path
	M			src/applications/calendar/controller/PhabricatorCalendarViewStatusController.php