Opened 11 years ago

Closed 11 years ago

#5974 closed (fixed)

debug error page does not escape text in local vars section

Reported by: Gary Wilson <gary.wilson@…> Owned by: nobody
Component: Core (Other) Version: master
Severity: Keywords:
Cc: Triage Stage: Accepted
Has patch: no Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: UI/UX:


I was triggering this by doing a post with text for a javascript alert box in one of the form fields. If the code or view that processes the request raises an Exception, then the error page will popup several alert boxes, one for each display of the request in the "Local vars" section. This was mentioned in comment:ticket:5880:8 and I hit this bug while debugging that ticket.

Change History (2)

comment:1 Changed 11 years ago by Gary Wilson <gary.wilson@…>

Triage Stage: UnreviewedAccepted

comment:2 Changed 11 years ago by Malcolm Tredinnick

Resolution: fixed
Status: newclosed

(In [6704]) Fixed #5974 -- Added autoescaping for source code lines and local variables in
technical debug page.

Note: See TracTickets for help on using tickets.
Back to Top