Page MenuHomeSoftware Heritage
Create Task
Maniphest T1699

XSS in swh-web
Closed, MigratedEdits Locked
Actions

Description

I came across some more XSS prone pages.

  • browse/search table
  • all the error messages (500,404)

I'll try growing the list, and fix all those in a go. :)

Revisions and Commits

rDWAPPS Web applications
D1442rDWAPPSccfc15753561 swh-web: Fix numerous XSS vulnerabilities

Related Objects

Event Timeline

kalpitk created this task.May 3 2019, 1:15 PM
kalpitk created this object in space S1 Public.
kalpitk created this object with visibility "All Users".
zack triaged this task as High priority.May 3 2019, 1:23 PM
zack changed the visibility from "All Users" to "Public (No Login Required)".
zack added a project: Security.
kalpitk updated the task description. (Show Details)May 3 2019, 1:33 PM
kalpitk mentioned this in D1442: swh-web: Fix XSS.May 4 2019, 5:09 PM
kalpitk closed this task as Resolved by committing rDWAPPSccfc15753561: swh-web: Fix numerous XSS vulnerabilities.May 7 2019, 8:52 PM
kalpitk added a commit: rDWAPPSccfc15753561: swh-web: Fix numerous XSS vulnerabilities.
gitlab-migration changed the task status from Resolved to Migrated.Jan 8 2023, 4:27 PM
gitlab-migration claimed this task.
gitlab-migration added a subscriber: gitlab-migration.

This task has been migrated to GitLab.

About · Developer information · Legal