Fix XSS in path names of inline comment list.
This commit is contained in:
@@ -119,7 +119,7 @@ final class DifferentialRevisionCommentView extends AphrontView {
|
|||||||
$inline_render[] =
|
$inline_render[] =
|
||||||
'<tr>'.
|
'<tr>'.
|
||||||
'<th colspan="2">'.
|
'<th colspan="2">'.
|
||||||
$changeset->getFileName().
|
phutil_escape_html($changeset->getFileName()).
|
||||||
'</th>'.
|
'</th>'.
|
||||||
'</tr>';
|
'</tr>';
|
||||||
foreach ($inlines as $inline) {
|
foreach ($inlines as $inline) {
|
||||||
|
|||||||
Reference in New Issue
Block a user