pagure

#232 XSS in description field
Closed: Fixed Opened by codeblock.

Closed: Fixed
Reopen Issue

If I write: <script>alert("hi");</script> in the description field of a new project, the JS gets executed whenever I look at the newly created project's main page.

Implemented in https://pagure.io/pagure/pull-request/233

Better fix in: https://pagure.io/pagure/pull-request/235

And merged
Metadata

0.2

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.