From: lpsolit%gmail.com <>
Date: Thu, 23 Aug 2007 20:34:38 +0000 (+0000)
Subject: Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric... 
X-Git-Tag: bugzilla-3.1.2~53
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=63e7d4ae05d9eeff9a7d8a2613d8b70012d036fa;p=thirdparty%2Fbugzilla.git

Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=LpSolit
---

diff --git a/template/en/default/bug/create/create-guided.html.tmpl b/template/en/default/bug/create/create-guided.html.tmpl
index d60167de0a..6953c84efb 100644
--- a/template/en/default/bug/create/create-guided.html.tmpl
+++ b/template/en/default/bug/create/create-guided.html.tmpl
@@ -283,7 +283,7 @@ function PutDescription() {
       <b>Build Identifier</b>
     </td>
     <td valign="top">
-      <input type="text" size="80" name="buildid" value="[% buildid %]">
+      <input type="text" size="80" name="buildid" value="[% buildid FILTER html %]">
       <p>
         This should identify the exact version of the product you were using.  
         If the above field is blank or you know it is incorrect, copy the 
diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl
index 73d42224aa..93305c1c84 100644
--- a/template/en/default/filterexceptions.pl
+++ b/template/en/default/filterexceptions.pl
@@ -385,7 +385,6 @@
 'bug/create/create-guided.html.tmpl' => [
   'matches.0', 
   'tablecolour',
-  'buildid',
   'sel',
   'productstring', 
 ],