Comment #3 on issue 3274 by uchida...@gmail.com: xss in autocomplete
I also don't understand your repro case. How does "uchi" cause any sort
I input "<script>alert('uchida')</scrip" to First name in my Profile.
If you type "uchi" in this state, my First name output HTML without html
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
You received this message because you are subscribed to the Google Groups
To unsubscribe from this group and stop receiving emails from it, send an email
To post to this group, send email to email@example.com.
Visit this group at http://groups.google.com/group/reviewboard-issues.
For more options, visit https://groups.google.com/groups/opt_out.