search

NixOS / hydra

Hydra, the Nix-based continuous build system
http://nixos.org/hydra
GNU General Public License v3.0
1.18k stars 300 forks source link

Hydra doesn't display jobset names with angle brackets correctly #361

Open expipiplus1 opened 8 years ago

expipiplus1 commented 8 years ago

A jobset with the name 'foo <bar>' will be displayed as 'foo ' in the project page.

This seems to happen everywhere else the jobset name is displayed.

See also #343

domenkozar commented 8 years ago

Sounds like an XSS, the value is interpreted as html.