Bug 619648: (CVE-2010-4570) [SECURITY] XSS via summary in "possible duplicates" table...

[r=mkanat a=LpSolit]

diff --git a/template/en/default/bug/create/create.html.tmpl b/template/en/default/bug/create/create.html.tmpl
index a2e7b7eaed51a4aab076b89162f0ff014f00ecd9..8c717760ed9da15466414ff899b802e1e3634f70 100644 (file)
--- a/template/en/default/bug/create/create.html.tmpl
+++ b/template/en/default/bug/create/create.html.tmpl
@@ -533,7 +533,8 @@ TUI_hide_default('attachment_text_field');
               { key: "id", label: "[% field_descs.bug_id FILTER js %]",
                 formatter: YAHOO.bugzilla.dupTable.formatBugLink },
               { key: "summary", 
-                label: "[% field_descs.short_desc FILTER js %]" },
+                label: "[% field_descs.short_desc FILTER js %]",
+                formatter: "text" },
               { key: "status",
                 label: "[% field_descs.bug_status FILTER js %]",
                 formatter: YAHOO.bugzilla.dupTable.formatStatus },