Red Hat Bugzilla – Bug 500891
Need to escape snippet on snippet delete page
Last modified: 2009-09-10 15:25:45 EDT
Create a snippet with this text:
Then go to delete it. On the delete confirm page notice that the text wasn't escaped and the </pre> is actually rendered as html. This is very bad, and we should escape it.
Should be fixed in the next next iso
Fixed in http://git.fedorahosted.org/git/?p=spacewalk.git;a=commit;h=a81fd6cdbb90e921428c245eb79cf277e515c77d
VERIFIED on 5/21 build.
Moving to RELEASE_PENDING.
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.