engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security: fixed self-xss on archive download page.

Browse source
This commit is contained in:
RhodeCode Admin 2021-11-18 15:18:21 +01:00
parent 2c268b6026
commit 6661b23cd5
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
rhodecode/apps/repository/views/repo_files.py
View file

@ -381,7 +381,7 @@ class RepoFilesView(RepoAppView):
try:
at_path = commit.get_node(at_path).path or default_at_path
except Exception:
return Response(_('No node at path {} for this repository').format(at_path))
return Response(_('No node at path {} for this repository').format(h.escape(at_path)))
# path sha is part of subdir
path_sha = ''