** Visibility changed to: Public -- User content not escaped in groupviews blocktype https://bugs.launchpad.net/bugs/669307 You received this bug notification because you are a member of Mahara Committers, which is subscribed to Mahara.
Status in Mahara ePortfolio: Fix Released Bug description: A small number of templates still have auto_escape disabled. These didn't get updated before 1.3 because they were being worked on in parallel with the review of all templates. One of these templates displays unescaped html: blocktype/groupviews/theme/raw/groupviews.tpl; the others are okay. Affects master and 1.3 stable only. This template doesn't exist in 1.2.x and the template it got copied from was fixed independently. _______________________________________________ Mailing list: https://launchpad.net/~mahara-core Post to : [email protected] Unsubscribe : https://launchpad.net/~mahara-core More help : https://help.launchpad.net/ListHelp
