From: lpsolit%gmail.com <>
Date: Thu, 23 Aug 2007 20:36:56 +0000 (+0000)
Subject: Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric... 
X-Git-Tag: bugzilla-2.22.3~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7e84c76b339eec9bc48337dca823d5fa41012147;p=thirdparty%2Fbugzilla.git

Bug 386942: [SECURITY] User Agent text should be HTML escaped - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=LpSolit
---

diff --git a/template/en/default/bug/create/create-guided.html.tmpl b/template/en/default/bug/create/create-guided.html.tmpl
index 7b50419851..59a6448447 100644
--- a/template/en/default/bug/create/create-guided.html.tmpl
+++ b/template/en/default/bug/create/create-guided.html.tmpl
@@ -276,7 +276,7 @@ function PutDescription() {
       <b>Build Identifier<br>(User Agent)</b>
     </td>
     <td valign="top">
-      <input type="text" size="80" name="buildid" value="[% buildid %]">
+      <input type="text" size="80" name="buildid" value="[% buildid FILTER html %]">
       <p>
         This identifies exactly the version of the product you were using.
         If reporting [% terms.abug %] in Mozilla or Firefox,
diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl
index 9f33340b4c..c66e801349 100644
--- a/template/en/default/filterexceptions.pl
+++ b/template/en/default/filterexceptions.pl
@@ -405,7 +405,6 @@
 'bug/create/create-guided.html.tmpl' => [
   'matches.0', 
   'tablecolour',
-  'buildid',
   'sel',
   'productstring', 
 ],