| commit | 6943fff87324bd54c3a37a5160a5fb77498c355e | |
| author | William Desportes <williamdes@wdes.fr> | |
| Sat, 9 Jun 2018 14:07:57 +0000 (9 16:07 +0200) | ||
| committer | Isaac Bennetch <bennetch@gmail.com> | |
| Tue, 19 Jun 2018 15:32:17 +0000 (19 11:32 -0400) | ||
| tree | 65c83a4e7b55ab4258cc633607e7dda8641c8634 | treesnapshot (tar.gz zip) |
| parent | ddf9b786e4490ce3d35d44b908066006d22b3fa2 | commitdiff |
Escape database name in URL
Designer > new page shows iframe when db name is: "'"><iframe onload=alert(1)>
Signed-off-by: William Desportes <williamdes@wdes.fr>
Designer > new page shows iframe when db name is: "'"><iframe onload=alert(1)>
Signed-off-by: William Desportes <williamdes@wdes.fr>
| js/designer/move.js | diffblobblamehistory |