pagure

#230 Another XSS
Closed: Fixed Opened by codeblock.

Closed: Fixed
Reopen Issue

Comments (or, I assume, anywhere that markdown is rendered) don't filter HTML and so there is another gaping XSS vulnerability...

Example here: https://pagure.io/pagure-haskell/issue/5

Implemented in https://pagure.io/pagure/pull-request/233

Better fix in: https://pagure.io/pagure/pull-request/235

And merged
Metadata

0.2

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.