Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric...

diff --git a/template/en/default/bug/create/create-guided.html.tmpl b/template/en/default/bug/create/create-guided.html.tmpl
index 7b50419851d15aa677f7dd921559acf54a3b49ca..59a644844798d8fbf1e6c45e0a6b057f5cc57aca 100644 (file)
--- a/template/en/default/bug/create/create-guided.html.tmpl
+++ b/template/en/default/bug/create/create-guided.html.tmpl
@@ -276,7 +276,7 @@ function PutDescription() {
       <b>Build Identifier<br>(User Agent)</b>
     </td>
     <td valign="top">
-      <input type="text" size="80" name="buildid" value="[% buildid %]">
+      <input type="text" size="80" name="buildid" value="[% buildid FILTER html %]">
       <p>
         This identifies exactly the version of the product you were using.
         If reporting [% terms.abug %] in Mozilla or Firefox,

diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl
index 9f33340b4cc807ed6a3096ede3590bfb520ed87c..c66e80134939bfb858518c27471b26dd023be552 100644 (file)
--- a/template/en/default/filterexceptions.pl
+++ b/template/en/default/filterexceptions.pl
@@ -405,7 +405,6 @@
 'bug/create/create-guided.html.tmpl' => [
   'matches.0', 
   'tablecolour',
-  'buildid',
   'sel',
   'productstring', 
 ],