OpenStack Dashboard (Horizon)

  1. Bug #1247675
  2. Comment #10

Comment 10 for bug 1247675

Revision history for this message
Thierry Carrez (ttx) wrote : Re: Persistent XSS in OpenStack Web UI for Instances

Could this one be proposed as a stable/grizzly backport ?

We also need to doublecheck with the reporter on the "Network Topology" case.

David: did you go through the code to try to catch other occurences of the same issue (API-provided names used to trigger XSS in the web UI ?)