Comment #3 on issue 3274 by uchida...@gmail.com: xss in autocomplete
http://code.google.com/p/reviewboard/issues/detail?id=3274
I also don't understand your repro case. How does "uchi" cause any sort
of issue?
I input "<script>alert('uchida')</scrip" to First name in my Profile.
If you type "uchi" in this state, my First name output HTML without html
escape.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
You received this message because you are subscribed to the Google Groups
"reviewboard-issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to reviewboard-issues+unsubscr...@googlegroups.com.
To post to this group, send email to reviewboard-issues@googlegroups.com.
Visit this group at http://groups.google.com/group/reviewboard-issues.
For more options, visit https://groups.google.com/groups/opt_out.
