Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric...

diff --git a/template/en/default/bug/create/create-guided.html.tmpl b/template/en/default/bug/create/create-guided.html.tmpl
index d60167de0afb57e325743ca0583690e8e1293545..6953c84efbe01b7fffd1e4d1c97cd78c87b4086a 100644 (file)
--- a/template/en/default/bug/create/create-guided.html.tmpl
+++ b/template/en/default/bug/create/create-guided.html.tmpl
@@ -283,7 +283,7 @@ function PutDescription() {
       <b>Build Identifier</b>
     </td>
     <td valign="top">
-      <input type="text" size="80" name="buildid" value="[% buildid %]">
+      <input type="text" size="80" name="buildid" value="[% buildid FILTER html %]">
       <p>
         This should identify the exact version of the product you were using.  
         If the above field is blank or you know it is incorrect, copy the 

diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl
index 73d42224aa717f5e25726a208d4aef4edd9fbca5..93305c1c841be6bf0d99ab7f55c4c6caffb3e1c2 100644 (file)
--- a/template/en/default/filterexceptions.pl
+++ b/template/en/default/filterexceptions.pl
@@ -385,7 +385,6 @@
 'bug/create/create-guided.html.tmpl' => [
   'matches.0', 
   'tablecolour',
-  'buildid',
   'sel',
   'productstring', 
 ],