From: lpsolit%gmail.com <>
Date: Thu, 23 Aug 2007 20:37:55 +0000 (+0000)
Subject: Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric... 
X-Git-Tag: bugzilla-2.20.5~2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=6ba37f36a8ee695ef8779a5db4e5587c5eba4480;p=thirdparty%2Fbugzilla.git

Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=LpSolit
---

diff --git a/template/en/default/bug/create/create-guided.html.tmpl b/template/en/default/bug/create/create-guided.html.tmpl
index d84a6d3a64..1da2899f80 100644
--- a/template/en/default/bug/create/create-guided.html.tmpl
+++ b/template/en/default/bug/create/create-guided.html.tmpl
@@ -275,7 +275,7 @@ function PutDescription() {
       <b>Build Identifier<br>(User Agent)</b>
     </td>
     <td valign="top">
-      <input type="text" size="80" name="buildid" value="[% buildid %]">
+      <input type="text" size="80" name="buildid" value="[% buildid FILTER html %]">
       <p>
         This identifies exactly the version of the product you were using.
         If reporting [% terms.abug %] in Mozilla or Firefox,
diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl
index dbbab8e515..ab0a752471 100644
--- a/template/en/default/filterexceptions.pl
+++ b/template/en/default/filterexceptions.pl
@@ -416,7 +416,6 @@
 'bug/create/create-guided.html.tmpl' => [
   'matches.0', 
   'tablecolour',
-  'buildid',
   'sel',
   'productstring', 
 ],