diff options
| author | Matthew Somerville <matthew-github@dracos.co.uk> | 2016-07-06 12:16:33 +0100 |
|---|---|---|
| committer | Matthew Somerville <matthew-github@dracos.co.uk> | 2016-07-06 16:25:52 +0100 |
| commit | c9dc13d3c966abc11203bfb18404d8a40e795b3b (patch) | |
| tree | c28d9b67c488bbd91fd2db58c339054455915665 /t | |
| parent | a060d03f36275f1fae1c041cca813bddeef6287c (diff) | |
Fix two XSS vulnerabilities.
The title in the OpenGraph header was not being properly escaped, and
the hide pins/all pins links were using single quotes which were able
to be broken out of.
Also remove the single quotes around rss_feed_uri, though this is not
a vulnerability as its contents were sanitised (postcode or co-ords).
Diffstat (limited to 't')
0 files changed, 0 insertions, 0 deletions