[Commotion-admin] [luci-commotion] Splash: Upload field allows invalid input (#420)
Dan Staples
notifications at github.com
Tue Sep 2 10:23:31 EDT 2014
The form field for uploading splash page text allows uploading arbitrary files, including binary files which are then displayed without escaping to the user.
---
Reply to this email directly or view it on GitHub:
https://github.com/opentechinstitute/luci-commotion/issues/420
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.chambana.net/pipermail/commotion-admin/attachments/20140902/5559f98c/attachment.html>
More information about the Commotion-admin
mailing list