From f2b9d48c8189f0ea68da1d8d1d73d5b1904b2b25 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Fr=C3=A9d=C3=A9ric=20Buclin?= Date: Fri, 6 Jan 2012 00:50:05 +0100 Subject: [PATCH] Bug 714664: The content of the "emailregexpdesc" parameter is not escaped when displayed to the user r=dkl a=LpSolit --- template/en/default/global/code-error.html.tmpl | 2 +- template/en/default/global/user-error.html.tmpl | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/template/en/default/global/code-error.html.tmpl b/template/en/default/global/code-error.html.tmpl index ed3bcce027..e2cec5d912 100644 --- a/template/en/default/global/code-error.html.tmpl +++ b/template/en/default/global/code-error.html.tmpl @@ -46,7 +46,7 @@ A legal address must contain exactly one '@', and at least one '.' after the @. [% ELSE %] - [%+ Param('emailregexpdesc') %] + [%+ Param('emailregexpdesc') FILTER html_light %] [% END %] It must also not contain any of these special characters: \ ( ) & < > , ; : " [ ], or any whitespace. diff --git a/template/en/default/global/user-error.html.tmpl b/template/en/default/global/user-error.html.tmpl index 89926bfd55..57374a566c 100644 --- a/template/en/default/global/user-error.html.tmpl +++ b/template/en/default/global/user-error.html.tmpl @@ -852,7 +852,7 @@ A legal address must contain exactly one '@', and at least one '.' after the @. [% ELSE %] - [%+ Param('emailregexpdesc') %] + [%+ Param('emailregexpdesc') FILTER html_light %] [% END %] It must also not contain any of these special characters: \ ( ) & < > , ; : " [ ], or any whitespace. -- 2.47.3