Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	• bzimport
	Oct 22 2013, 10:28 AM

Description

Author: tomasz.chlebowski

Description:
see: https://ha.m.wikipedia.org/w/index.php?title=Special:ZeroRatedMobileAccess&from=File:Wikiversity-logo.svg&to=javascript:alert%28document.cookie%29

Version: unspecified
Severity: normal

• bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 2:23 AM

• bzimport set Reference to bz55991.

• bzimport added a subscriber: Unknown Object (MLST).

I reviewed a patch with Adam today, so we should get the cluster patched for this soon.

Created attachment 13546
Git patch

Attached:

0001-Apply-output-escaping-conditionally.patch1 KBDownload

This issue was assigned CVE-2013-4573

Patched in gerrit Ie301c3c27c55dfb0f4d3c653785ad0a35a532a95

Yurik set Security to None.

Yurik added projects: ZeroBanner, Zero.

	F12242: 0001-Apply-output-escaping-conditionally.patch
	Nov 22 2014, 2:23 AM