projects / project / luci.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 51e4558) | patch
luci-base: dispatcher.lua: prevent XSS through 404 error template
authorJo-Philipp Wich <[email protected]>
Fri, 10 Mar 2023 14:09:04 +0000 (15:09 +0100)
committerJo-Philipp Wich <[email protected]>
Fri, 10 Mar 2023 14:09:04 +0000 (15:09 +0100)
commitcd8bea94e61fa72a0a2ba7bc54d7b2d7b7572519
treee19877cc025a4bc3bc0aec87e07c42d7118aa811tree | snapshot
parent51e4558461cfc7339461dcd5c7516957b2d01a29commit | diff
luci-base: dispatcher.lua: prevent XSS through 404 error template

Make sure to escape the user controlled URL passed as part of the error
message into the error404 template in order to avoid XSS.

Reported-by: 40826d <[email protected]>
Signed-off-by: Jo-Philipp Wich <[email protected]>
modules/luci-base/luasrc/dispatcher.lua diff | blob | history
Lua Configuration Interface (mirror)