This site is an archive; learn more about 8 years of OpenHatch.

[OH-Dev] [issue761] Cross site scripting problem in map-v2.js (patch available)

Asheesh Laroia bugs at openhatch.org
Sun Sep 2 22:12:46 UTC 2012


New submission from Asheesh Laroia <asheesh at asheesh.org>:

Hello dear people,

A very (unnecessarily!) friendly emailed us a few months ago about a cross-site 
scripting attack enabled by some low-quality Javascript on the site.

https://github.com/openhatch/oh-mainline/pull/62 is a pull request with that 
fix. (I mostly created this bug so I can bug Mark or someone else into reviewing 
the changes.)

----------
messages: 3389
nosy: MarkTraceur, paulproteus
priority: urgent
status: need-review
title: Cross site scripting problem in map-v2.js (patch available)

__________________________________________
Roundup issue tracker <bugs at openhatch.org>
<https://openhatch.org/bugs/issue761>
__________________________________________


More information about the Devel mailing list