[OH-Dev] [issue761] Cross site scripting problem in map-v2.js (patch available)

[Asheesh Laroia]

New submission from Asheesh Laroia <asheesh at asheesh.org>:

Hello dear people,

A very (unnecessarily!) friendly emailed us a few months ago about a cross-site 
scripting attack enabled by some low-quality Javascript on the site.

https://github.com/openhatch/oh-mainline/pull/62 is a pull request with that 
fix. (I mostly created this bug so I can bug Mark or someone else into reviewing 
the changes.)

----------
messages: 3389
nosy: MarkTraceur, paulproteus
priority: urgent
status: need-review
title: Cross site scripting problem in map-v2.js (patch available)

__________________________________________
Roundup issue tracker <bugs at openhatch.org>
<https://openhatch.org/bugs/issue761>
__________________________________________