#5172 HIGH Future : Gitweb fails to html-escape "owner" data that it pulls from a user's GECOS field.

Zarro Boogs per Child bugtracker at laptop.org
Wed Nov 28 19:36:21 EST 2007


#5172: Gitweb fails to html-escape "owner" data that it pulls from a user's GECOS
field.
-----------------------------+----------------------------------------------
  Reporter:  mstone          |       Owner:  djbclark      
      Type:  defect          |      Status:  assigned      
  Priority:  high            |   Milestone:  Future Release
 Component:  infrastructure  |     Version:                
Resolution:                  |    Keywords:                
  Verified:  0               |  
-----------------------------+----------------------------------------------

Comment(by djbclark):

 cjb | note that you can't upgrade gitweb without upgrading git at the same
 time.
 cjb | which is why we don't do it often.
 m_stone | also note that we're carrying some custom patches against gitweb
 cjb | where "can't" means that it will likely fail in odd ways.
 djbclark | I'll be sure to include you guys in the process :)

-- 
Ticket URL: <http://dev.laptop.org/ticket/5172#comment:4>
One Laptop Per Child <http://dev.laptop.org>
OLPC bug tracking system



More information about the Bugs mailing list