[Commotion-admin] [luci-commotion-apps] Stored XSS in local application URL (High) (#12)

[Griffin Boyce]

@danstaples It's a decent step in the right direction, but I think that long-term we should consider using a filter such as XSSfilter for Lua.  https://github.com/yuri/lua-xssfilter

---
Reply to this email directly or view it on GitHub:
https://github.com/opentechinstitute/luci-commotion-apps/issues/12#issuecomment-26281889
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.chambana.net/pipermail/commotion-admin/attachments/20131014/54443c59/attachment.html>