diff options
| author | bwarsaw <> | 2006-08-30 14:54:22 +0000 |
|---|---|---|
| committer | bwarsaw <> | 2006-08-30 14:54:22 +0000 |
| commit | 0cee915eeb5f8f99ed036d257b1103c28373eb5b (patch) | |
| tree | 1489a315aaa485d4c1aa91762b63a232fb23149d /Mailman/Cgi/options.py | |
| parent | 14bb48657eae40f5ef80adeebd021d6a186e2cd2 (diff) | |
| download | mailman2-0cee915eeb5f8f99ed036d257b1103c28373eb5b.tar.gz mailman2-0cee915eeb5f8f99ed036d257b1103c28373eb5b.tar.xz mailman2-0cee915eeb5f8f99ed036d257b1103c28373eb5b.zip | |
CVE-2006-3636. Fixes for various cross-site scripting issues. Discovery by
Moritz Naumann and most of the repair work done by Mark Sapiro (with some
additional work by Barry).
Diffstat (limited to '')
| -rw-r--r-- | Mailman/Cgi/options.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/Mailman/Cgi/options.py b/Mailman/Cgi/options.py index eb7adb67..d423f262 100644 --- a/Mailman/Cgi/options.py +++ b/Mailman/Cgi/options.py @@ -1,4 +1,4 @@ -# Copyright (C) 1998-2005 by the Free Software Foundation, Inc. +# Copyright (C) 1998-2006 by the Free Software Foundation, Inc. # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License @@ -702,7 +702,7 @@ def options_page(mlist, doc, user, cpuser, userlang, message=''): fullname = Utils.uncanonstr(mlist.getMemberName(user), userlang) if fullname: - presentable_user += ', %s' % fullname + presentable_user += ', %s' % Utils.websafe(fullname) # Do replacements replacements = mlist.GetStandardReplacements(userlang) |