htmlのエスケープ

• Reporter: senju
• Owner: senju
• Type: Bugs
• Status: Closed
• Component: (None)
• MileStone: Spring 2.5 on GAE Sample
• Priority: 5 - Medium
• Severity: 5 - Medium
• Resolution: Fixed
• File: None

Details Reply

このままだとscript injectionし放題

Ticket History (3/4 Histories)

2009-07-29 18:42 Updated by: senju

• New Ticket "htmlのエスケープ" created

2009-08-05 12:50 Updated by: senju

• Owner Update from senju to (None)

2009-08-17 20:19 Updated by: senju

• Owner Update from (None) to senju

2009-08-17 21:02 Updated by: senju

• Resolution Update from None to Fixed
• Status Update from Open to Closed
• Ticket Close date is changed to 2009-08-17 21:02

Comment Reply

デフォで全部エスケープってのはやらないので一個一個テスト書いた方がいいな