Project

General

Profile

Backport(バックポート) #2167

SNS名称変更で入力した値がエスケープされていない

Added by isao sano about 8 years ago. Updated almost 8 years ago.

Status:
Fixed(完了)
Priority:
High(高め)
Target version:
Start date:
2011-06-09
Due date:
% Done:

100%


Description

■バグ概要

SNS名称変更(pc_backend.php/sns/term)で入力した値がエスケープされていないため、pc_frontendの表示が崩れる

■再現手順

1)SNS名称変更(pc_backend.php/sns/term)を表示
2)アクティビティ(pc)に<script>alert("alert");</script>を入力して、編集ボタンを押す
3)pc_frontendのマイホームを表示し、スクリプトが動作する事を確認

■環境

OS: Mac OSX
ブラウザ: Firefox3

■仕様

入力した文字がエスケープされる


Related issues

Related to OpenPNE 3 - Bug(バグ) #1635: SNS名称変更で入力した値がエスケープされていない Fixed(完了) 2010-10-01

Associated revisions

Revision 64843527 (diff)
Added by Itsuro Tajima almost 8 years ago

(fixes #2167, BP from #1635) added escape function before saving sns term configuration

Revision 8a34bb98 (diff)
Added by Itsuro Tajima almost 8 years ago

(refs #2167, BP from #1635) Revert "added escape function before saving sns term configuration"

This reverts commit b071ff93a01d999d06de8592975d0b0058153be5.

Revision 6a3bc583 (diff)
Added by Itsuro Tajima almost 8 years ago

(fixes #2167, BP from #1635) fixed term output with escape

History

#1 Updated by Kousuke Ebihara about 8 years ago

  • Target version changed from OpenPNE3.6beta11 to OpenPNE3.6beta12

親チケットが「テスト待ち」「完了」でないものをすべて beta12 以降での対応とします。

#2 Updated by isao sano about 8 years ago

  • Target version changed from OpenPNE3.6beta12 to OpenPNE3.6beta13

#3 Updated by Shingo Yamada about 8 years ago

  • Target version changed from OpenPNE3.6beta13 to OpenPNE 3.6RC1

#4 Updated by Maki Takahashi almost 8 years ago

  • Status changed from New(新規) to Accepted(着手)
  • Assignee changed from Shingo Yamada to Maki Takahashi

BPやります

#5 Updated by Itsuro Tajima almost 8 years ago

  • Status changed from Accepted(着手) to Pending Review(レビュー待ち)
  • % Done changed from 0 to 50

更新履歴 648435274f5c6e49b7142e086dece2d8e2bd5714 で適用されました。

#6 Updated by Itsuro Tajima almost 8 years ago

更新履歴 6a3bc583f5deee885984ffd5d5692a3e2c834fdc で適用されました。

#7 Updated by Kousuke Ebihara almost 8 years ago

  • Status changed from Pending Review(レビュー待ち) to Pending Testing(テスト待ち)
  • % Done changed from 50 to 70

#8 Updated by Fumie Toyooka almost 8 years ago

  • Status changed from Pending Testing(テスト待ち) to Fixed(完了)
  • % Done changed from 70 to 100

テストOKです。

Also available in: Atom PDF