diff options
| author | Matthew Somerville <matthew-github@dracos.co.uk> | 2016-07-06 12:16:33 +0100 |
|---|---|---|
| committer | Matthew Somerville <matthew-github@dracos.co.uk> | 2016-07-06 16:29:06 +0100 |
| commit | 709193b9ccb60d70f9b646a9c498abde125f828f (patch) | |
| tree | 51d9cc73eb4b4c3fd42596acc25a03fc5ff80965 /bin/site-specific-install.sh | |
| parent | 0858b04fccef1beb3c798bfa734a23621b02e083 (diff) | |
Fix two XSS vulnerabilities.
The title in the OpenGraph header was not being properly escaped, and
the hide pins/all pins links were using single quotes which were able
to be broken out of.
Also remove the single quotes around rss_feed_uri, though this is not
a vulnerability as its contents were sanitised (postcode or co-ords).
Diffstat (limited to 'bin/site-specific-install.sh')
0 files changed, 0 insertions, 0 deletions