Paragraph tags in blueprint title
Bug #745893 reported by
Jonathan Lange
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Launchpad itself |
Fix Released
|
Critical
|
Ian Booth | ||
Bug Description
See https:/
I don't recall changing the title using AJAX, I think I just submitted the registration form normally.
You can see the same effect by editing the title of an existing blueprint. I don't *think* this is an XSS bug (I tried a couple of things), but marking it as such just in case.
Related branches
lp://qastaging/~wallyworld/launchpad/blueprint-title-fix
- Robert Collins (community): Approve
- William Grant: Approve (code*)
- Tim Penhey: Pending requested
-
Diff: 232 lines (+35/-51)7 files modifiedlib/lp/app/javascript/client.js (+11/-22)
lib/lp/app/javascript/lp.ui.js (+5/-2)
lib/lp/app/javascript/multicheckbox.js (+1/-2)
lib/lp/app/javascript/picker.js (+1/-5)
lib/lp/app/javascript/tests/test_lp_client.js (+13/-16)
lib/lp/blueprints/templates/specification-index.pt (+3/-3)
lib/lp/code/templates/sourcepackagerecipe-index.pt (+1/-1)
| Changed in launchpad: | |
| assignee: | nobody → Ian Booth (wallyworld) |
| status: | Triaged → In Progress |
Revision history for this message
| Launchpad QA Bot (lpqabot) wrote | #1 |
| Changed in launchpad: | |
| milestone: | none → 11.04 |
| tags: | added: qa-needstesting |
| Changed in launchpad: | |
| status: | In Progress → Fix Committed |
| tags: |
added: qa-ok removed: qa-needstesting |
Revision history for this message
| William Grant (wgrant) wrote | #2 |
| Changed in launchpad: | |
| status: | Fix Committed → Fix Released |
| visibility: | private → public |
| security vulnerability: | yes → no |
| Changed in launchpad: | |
| status: | Fix Released → Fix Committed |
| tags: |
added: bad-commit-12710 qa-bad removed: qa-ok |
Revision history for this message
| William Grant (wgrant) wrote | #3 |
| tags: |
added: qa-ok removed: bad-commit-12710 qa-bad |
| Changed in launchpad: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
Fixed in stable r12710 <http://