1 new commit in galaxy-central: https://bitbucket.org/galaxy/galaxy-central/changeset/96871214fe2f/ changeset: 96871214fe2f user: dannon date: 2012-09-19 16:32:19 summary: Prevent reflective XSS through message display. affected #: 1 file diff -r 70b60fd07d6a0ab6889c79a9518fd894e13f9c8d -r 96871214fe2f962004decde001de94d1ba827e94 templates/message.mako --- a/templates/message.mako +++ b/templates/message.mako @@ -82,12 +82,12 @@ ## Render large message. <%def name="render_large_message( message, status )"> - <div class="${status}messagelarge" style="margin: 1em">${_(message)}</div> + <div class="${status}messagelarge" style="margin: 1em">${_(message) | h}</div></%def> ## Render a message <%def name="render_msg( msg, status='done' )"> - <div class="${status}message">${_(msg)}</div> + <div class="${status}message">${_(msg) | h}</div><br/></%def> Repository URL: https://bitbucket.org/galaxy/galaxy-central/ -- This is a commit notification from bitbucket.org. You are receiving this because you have the service enabled, addressing the recipient of this email.