aboutsummaryrefslogtreecommitdiffstats
path: root/Mailman/Gui/Topics.py
diff options
context:
space:
mode:
authorbwarsaw <>2003-12-13 16:27:42 +0000
committerbwarsaw <>2003-12-13 16:27:42 +0000
commite4e38ef99ec8c747dfe2cf60b60b6271301a3244 (patch)
tree454586431aea30ab51a36c365fb0c1ac246ef16c /Mailman/Gui/Topics.py
parent4f6536f779a1142e0f0487e2285a659219f41a10 (diff)
downloadmailman2-e4e38ef99ec8c747dfe2cf60b60b6271301a3244.tar.gz
mailman2-e4e38ef99ec8c747dfe2cf60b60b6271301a3244.tar.xz
mailman2-e4e38ef99ec8c747dfe2cf60b60b6271301a3244.zip
handleForm(): Close some cross-site scripting holes found by Dirk
Mueller.
Diffstat (limited to 'Mailman/Gui/Topics.py')
-rw-r--r--Mailman/Gui/Topics.py1
1 files changed, 1 insertions, 0 deletions
diff --git a/Mailman/Gui/Topics.py b/Mailman/Gui/Topics.py
index 5f6de8d8..76bfd1e4 100644
--- a/Mailman/Gui/Topics.py
+++ b/Mailman/Gui/Topics.py
@@ -120,6 +120,7 @@ class Topics(GUIBase):
a pattern. Incomplete topics will be ignored."""))
continue
# Make sure the pattern was a legal regular expression
+ name = Utils.websafe(name)
try:
re.compile(pattern)
except (re.error, TypeError):