deac/gitlabhq
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Prevent xss attack over group name. Added regex validation for group and team name

Browse source
This commit is contained in:
Dmitriy Zaporozhets 2013-02-18 09:28:18 +02:00
parent cfdf94fc27
commit 020078663e
5 changed files with 22 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/helpers/projects_helper.rb
View file

@ -56,7 +56,7 @@ module ProjectsHelper
def project_title project
if project.group
content_tag :span do
link_to(project.group.name, group_path(project.group)) + " / " + project.name
link_to(simple_sanitize(project.group.name), group_path(project.group)) + " / " + project.name
end
else
project.name