4 ms·
XSS open. http://github.com/ninjagod/patchbin/issues#issue/1 http://github.com/ninjagod/patchbin/issues#issue/1
by oinopion 17y ago
XSS open. http://github.com/ninjagod/patchbin/issues#issue/1 http://github.com/ninjagod/patchbin/issues#issue/1
- antileet 17y agoI disabled escaping because it had trouble rendering XML code. I thought it was safe but I was wrong. Fixing now. Thanks! [edit] fixed
- oinopion 17y agoI played a bit with code and I think you could benefit from reading: http://www.python.org/dev/peps/pep-0008/ http://www.python.org/dev/peps/pep-0008/ http://docs.djangoproject.com/en/dev/topics/forms/ http://docs.djangoproject.com/en/dev/topics/forms/ http://docs.djangoproject.com/en/dev/topics/db/models/#many-to-one-relationships http://docs.djangoproject.com/en/dev/topics/db/models/#many-...