koji

#2746 VCS and DistURL not escaped
Closed: Fixed by tkopecek. Opened by alexi.

Closed: Fixed
Reopen Issue

These two variables, which can include arbitrary text, are displayed in web pages without being sanitized.

Metadata Update from @tkopecek:
- Custom field Size adjusted to None
- Issue set to the milestone: 1.24.1

Metadata Update from @jcupova:
- Issue tagged with: testing-ready

Commit 183f0af1 fixes this issue

PR #2747

Metadata Update from @tkopecek:
- Issue status updated to: Open (was: Closed)

PR #2747

Commit 183f0af1 fixes this issue

Commit 566c7070 fixes this issue

Metadata Update from @jobrauer:
- Issue tagged with: testing-done

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/koji/koji/issues/2746

Please continue any further discussion there.
Metadata
None

testing-done testing-ready

None
None
Low
None
Related Pull Requests
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.