Bug 1252437 - XSS vulnerability through malicious bug aliases

diff --git a/extensions/BMO/template/en/default/hook/bug/show-header-end.html.tmpl b/extensions/BMO/template/en/default/hook/bug/show-header-end.html.tmpl
index c9338aaf253f1847fc2888cebfdd327b74da760b..c49d06b7399aa410ce30f9a9bf41a987a138dac1 100644 (file)
--- a/extensions/BMO/template/en/default/hook/bug/show-header-end.html.tmpl
+++ b/extensions/BMO/template/en/default/hook/bug/show-header-end.html.tmpl
@@ -14,7 +14,8 @@
 [% END %]
 [% title = "$bug.bug_id – " %]
 [% IF bug.alias != '' %]
-  [% title = title _ "($bug.alias) " %]
+  [% filtered_alias = bug.alias FILTER html %]
+  [% title = title _ "($filtered_alias) " %]
 [% END %]
 [% title = title _ filtered_desc %]
 [% javascript = javascript _