oarevalo / BugLogHQ

BugLogHQ is a tool to centralize the handling of automated bug reports from multiple applications. BugLogHQ provides a unified view of error messages sent from any number of applications, allowing the developer to search, graph, forward, and explore the bug reports submitted by the applications.
http://www.bugloghq.com
154 stars 67 forks source link

Escape cgi.QUERY_STRING #148

Closed jbez closed 8 years ago

jbez commented 8 years ago

Given an example Query_String of: <meta HTTP-EQUIV="refresh" CONTENT="0; URL=http://google.com"> The META tag will be rendered as HTML in the entry Detail view, therefore cause an instant page-reload and send whoever is viewing the BugLog entry to visit a site chosen by the 'attacker'.

oarevalo commented 8 years ago

thanks!