From 72ed9e455c0cb697bd01a2a44b4b63820774cc35 Mon Sep 17 00:00:00 2001 From: joey Date: Wed, 21 Mar 2007 06:46:06 +0000 Subject: the real bug turned out to be in the meta plugin --- debian/changelog | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'debian/changelog') diff --git a/debian/changelog b/debian/changelog index 86815828a..976143aee 100644 --- a/debian/changelog +++ b/debian/changelog @@ -12,8 +12,8 @@ ikiwiki (1.46) unstable; urgency=low same time, and let the second person resolve the conflict. * Applied a patch from Michał to make the mercurial backend pass --quiet to hg. - * Fix a security hole that allowed a web user to insert - arbitrary html in the title of a page due to missing escaping. + * Fix a security hole that allowed a web user to insert arbitrary html in + the title of a page due to missing escaping of titles in the meta plugin. -- Joey Hess Wed, 21 Mar 2007 01:51:30 -0400 -- cgit v1.2.3