projects / KiwiIRC.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7c7590e) | patch
SECURITY FIX: Kiwi is vulnerable to XSS attack due to unsanitised topic text. Issue...
authorJack Allnutt <m2ys4u@Gmail.com>
Sat, 27 Oct 2012 08:10:31 +0000 (09:10 +0100)
committerDarren <darren@darrenwhitlen.com>
Sat, 27 Oct 2012 15:53:08 +0000 (16:53 +0100)
commita86e450a1a12bdffe9ce6d5c9b09d94df9a32931
tree9209e3351e07d3296637c882b1dce23c9909d394tree | snapshot (zip tar.gz)
parent7c7590eec122a0ee1bdd4d92d0ed28c2d2f76047commit | diff
SECURITY FIX: Kiwi is vulnerable to XSS attack due to unsanitised topic text. Issue #103

Changes the topic bar from an <input> to a <div contenteditable=true/>.

Also now uses Underscore's escape() method rather than .html().text() jQuery hack.
client/assets/css/style.css diff | blob | blame | history
client/assets/dev/view.js diff | blob | blame | history
client/index.html diff | blob | blame | history