search

koalamon / Koalamon

Open Source Incident Management
MIT License
8 stars 6 forks source link

Possible XSS at input fields #75

Closed sebastianneubert closed 8 years ago

sebastianneubert commented 8 years ago

Avoid any JS in inputs (integration configuration) at koalamon.

koalamon commented 8 years ago

Added {{ string | secure }} twig tag to TwigContentBundle. Using it when outputting the event message.

@sebastianneubert is this enough?

sebastianneubert commented 8 years ago

Maybe its enough. I'll check the new twig-filter.

koalamon commented 8 years ago

Tried some stuff, looks good.