forgejo/templates/repo
Gusted 4fdd0ed728
[SECURITY] Fix XSS in dismissed review
- It's possible for reviews to not be assiocated with users, when they
were migrated from another forge instance. In the migration code,
there's no sanitization check for author names, so they could contain
HTML tags and thus needs to be properely escaped.
- Pass `$reviewerName` trough `Escape`.

(cherry picked from commit fe2df46d05)

Conflicts:
	templates/repo/issue/view_content/comments.tmpl
	trivial context conflict
2024-02-22 22:44:22 +01:00
..
actions
branch
cite
diff Fix being unable to use a repo that prohibits accepting PRs as a PR source. (#26785) (#26790) 2023-09-08 08:09:18 +02:00
editor Fix incorrect "tabindex" attributes (#26733) (#26734) 2023-09-08 08:07:19 +02:00
find
graph Improve commit graph alignment and truncating (#26112) (#26127) 2023-07-26 13:49:15 +02:00
issue [SECURITY] Fix XSS in dismissed review 2024-02-22 22:44:22 +01:00
migrate [SECURITY] review(kn4ck3r): more template escapes 2024-02-22 22:33:06 +01:00
projects Fix incorrect "tabindex" attributes (#26733) (#26734) 2023-09-08 08:07:19 +02:00
pulls Don't stack PR tab menu on small screens (#25789) 2023-08-18 15:40:21 +02:00
release
settings [SECURITY] review(kn4ck3r): more template escapes 2024-02-22 22:33:06 +01:00
tag
wiki [SECURITY] Fix XSS in wiki last commit information 2024-02-22 22:36:14 +01:00
activity.tmpl
blame.tmpl
branch_dropdown.tmpl
clone_buttons.tmpl
clone_script.tmpl
commit_page.tmpl
commit_status.tmpl Make pending commit status yellow again (#25935) (#25968) 2023-07-24 07:58:56 +02:00
commit_statuses.tmpl
commits.tmpl
commits_list.tmpl
commits_list_small.tmpl
commits_table.tmpl Fix commit compare style (#26209) (#26226) 2023-07-30 07:46:19 +02:00
create.tmpl Fix incorrect "tabindex" attributes (#26733) (#26734) 2023-09-08 08:07:19 +02:00
create_helper.tmpl
empty.tmpl
file_info.tmpl
forks.tmpl
graph.tmpl
header.tmpl
home.tmpl
icon.tmpl
packages.tmpl
release_tag_header.tmpl
search.tmpl
search_name.tmpl
shabox_badge.tmpl
sub_menu.tmpl
unicode_escape_prompt.tmpl
upload.tmpl
user_cards.tmpl
view_file.tmpl
view_list.tmpl
watchers.tmpl