Opened 7 years ago

Closed 7 years ago

#5974 closed (fixed)

debug error page does not escape text in local vars section

Reported by: Gary Wilson <gary.wilson@…> Owned by: nobody
Component: Core (Other) Version: master
Severity: Keywords:
Cc: Triage Stage: Accepted
Has patch: no Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: UI/UX:

Description

I was triggering this by doing a post with text for a javascript alert box in one of the form fields. If the code or view that processes the request raises an Exception, then the error page will popup several alert boxes, one for each display of the request in the "Local vars" section. This was mentioned in comment:ticket:5880:8 and I hit this bug while debugging that ticket.

Change History (2)

comment:1 Changed 7 years ago by Gary Wilson <gary.wilson@…>

  • Needs documentation unset
  • Needs tests unset
  • Patch needs improvement unset
  • Triage Stage changed from Unreviewed to Accepted

comment:2 Changed 7 years ago by mtredinnick

  • Resolution set to fixed
  • Status changed from new to closed

(In [6704]) Fixed #5974 -- Added autoescaping for source code lines and local variables in
technical debug page.

Note: See TracTickets for help on using tickets.
Back to Top