engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security: fixed XSS in file editing.

Browse source
This commit is contained in:
Marcin Kuzminski 2019-08-26 16:58:25 +02:00
parent a60f0b8b09
commit 21fb4a7124
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
rhodecode/apps/repository/views/repo_files.py
View file

@ -1250,7 +1250,7 @@ class RepoFilesView(RepoAppView):
default_redirect_url = h.route_path('repo_commit', repo_name=self.db_repo_name,
commit_id=commit_id)
if content == old_content and node_path == org_node_path:
h.flash(_('No changes detected on {}').format(org_node_path),
h.flash(_('No changes detected on {}').format(h.escape(org_node_path)),
category='warning')
raise HTTPFound(default_redirect_url)