Skip to content

Commit bab22fe

Browse files
committed
Fix XSS in Changesets List page
Backported from ff7d7b65201738eab597691021b4faae5b92d7df. Changes in repo_manage_page.php are not applicable, as the 1.x code relies on var_dump() to display the repository config, and is therefore not vulnerable to the same XSS attack vector. Fixes #286 Conflicts: Source/pages/list.php Source/pages/repo_manage_page.php
1 parent cf5b0da commit bab22fe

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Source/pages/list.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@
2626

2727
<div class="table-container">
2828

29-
<h2><?php echo plugin_lang_get( 'changesets' ), ': ', $t_repo->name ?></h2>
29+
<h2><?php echo plugin_lang_get( 'changesets' ), ': ', string_display_line( $t_repo->name ) ?></h2>
3030

3131
<div class="right">
3232
<?php

0 commit comments

Comments
 (0)