From tracadmin@urchin.earth.li Mon Dec  5 22:06:24 2005
From: OpenGuides <tracadmin@urchin.earth.li>
To: openguides-tickets@lists.openguides.org
Subject: [openguides-tickets] [OpenGuides] #68: Malformed user name input not
 blocked by preferences template
Date: Mon, 05 Dec 2005 22:06:24 +0000
Message-ID: <074.417982f9cfddf26b8b5f35495c8ae49e@urchin.earth.li>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0117104118568770769=="

--===============0117104118568770769==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

#68: Malformed user name input not blocked by preferences template
--------------------------+-------------------------------------------------
Reporter:  earle          |       Owner:  dom       
    Type:  defect         |      Status:  new       
Priority:  normal         |   Component:  openguides
 Version:  svn            |    Severity:  normal    
Keywords:  templates cgi  |  
--------------------------+-------------------------------------------------
If you put something like
 {{{
 <a href="http://example.com/">Foo</a>
 }}}
 into the preferences page as your username, the edit form gets broken.
 (See attachment.) The username should be unescaped or some such before
 being set in the preferences cookie.

-- 
Ticket URL: <http://dev.openguides.org/ticket/68>
OpenGuides <http://openguides.org/>
The OpenGuides city guides project

--===============0117104118568770769==--


From tracadmin@urchin.earth.li Sun Mar  5 12:26:40 2006
From: OpenGuides <tracadmin@urchin.earth.li>
To: openguides-tickets@lists.openguides.org
Subject: [openguides-tickets] Re: [OpenGuides] #68: Malformed user name input
 not blocked by preferences template
Date: Sun, 05 Mar 2006 12:26:40 +0000
Message-ID: <083.835bc6eb086386cb834d61bfffa178cd@urchin.earth.li>
In-Reply-To: <074.417982f9cfddf26b8b5f35495c8ae49e@urchin.earth.li>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============5220607121763255716=="

--===============5220607121763255716==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

#68: Malformed user name input not blocked by preferences template
---------------------------+------------------------------------------------
 Reporter:  earle          |        Owner:  dom      
     Type:  defect         |       Status:  closed   
 Priority:  normal         |    Milestone:           
Component:  openguides     |      Version:  svn      
 Severity:  normal         |   Resolution:  duplicate
 Keywords:  templates cgi  |  
---------------------------+------------------------------------------------
Changes (by dom):

  * resolution:  => duplicate
  * status:  new => closed

-- 
Ticket URL: <http://dev.openguides.org/ticket/68>
OpenGuides <http://openguides.org/>
The OpenGuides city guides project

--===============5220607121763255716==--