Fixed prominent XSS vulnerabilities

tsauvine / rubyric

Rubric-based assessment tool

4 stars 9 forks source link

Fixed prominent XSS vulnerabilities #35

Closed shadikka closed 11 years ago

shadikka commented 11 years ago

At the moment Rubyric protects against little to no XSS from privileged users. This patch adds a lot of escaping to the templates, protecting against them.