From: Dylan William Hardison <dylan@hardison.net>
Date: Thu, 12 Apr 2018 17:27:19 +0000 (-0400)
Subject: Bug 1453697 - ensure error_message is escaped in opengraph description
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=99a5f75c6da5e1af5bf01a0b9e0aa8c88bcfdf35;p=thirdparty%2Fbugzilla.git

Bug 1453697 - ensure error_message is escaped in opengraph description
---

diff --git a/extensions/OpenGraph/template/en/default/hook/global/header-start.html.tmpl b/extensions/OpenGraph/template/en/default/hook/global/header-start.html.tmpl
index dc0dc1ad9..51c388d42 100644
--- a/extensions/OpenGraph/template/en/default/hook/global/header-start.html.tmpl
+++ b/extensions/OpenGraph/template/en/default/hook/global/header-start.html.tmpl
@@ -14,7 +14,7 @@
 <meta property="og:description"
       content="[% bug.bug_status FILTER html %] ([% bug.assigned_to.login FILTER email FILTER html %]) in [% bug.product FILTER html %] - [% bug.component FILTER html %]. Last updated [% bug.delta_ts FILTER time('%Y-%m-%d') %].">
 [% ELSIF error_message %]
-<meta property="og:description" content="[% error_message FILTER txt %]">
+<meta property="og:description" content="[% error_message FILTER txt FILTER html %]">
 [% END %]
 [% IF og_image %]
 <meta property="og:image" content="[% urlbase FILTER none %][% og_image FILTER html %]">