Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Escape username in optional logout tag. #3550

Closed
tomchristie opened this issue Oct 27, 2015 · 1 comment
Closed

Escape username in optional logout tag. #3550

tomchristie opened this issue Oct 27, 2015 · 1 comment
Labels
Bug
Milestone
3.2.5 Release

Comments

@tomchristie
Copy link
Member

The username in the optional logout tag is not escaped, and should be.
Issuing as security fix in 3.2.5, although cannot see any likely attack vector given that it's the user's own username, (presented in the browsable API).
@tomchristie tomchristie added this to the 3.2.5 Release milestone Oct 27, 2015
@tomchristie
Copy link
Member Author

Resolved in 3.2.5.

@tomchristie tomchristie mentioned this issue Oct 27, 2015
Closed
@pyup-bot pyup-bot mentioned this issue Oct 22, 2016
Merged
@pyup-bot pyup-bot mentioned this issue Oct 30, 2016
Merged
@pyup-bot pyup-bot mentioned this issue Feb 26, 2017
Merged
This was referenced Mar 9, 2017
Closed
Closed
Closed
@pyup-bot pyup-bot mentioned this issue Jun 7, 2017
Closed
@pyup-bot pyup-bot mentioned this issue Sep 19, 2017
Merged
This was referenced Oct 6, 2017
Closed
Closed
Closed
This was referenced Oct 16, 2017
Closed
Closed
Closed
Closed
@pyup-bot pyup-bot mentioned this issue Nov 6, 2017
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Bug
Projects
None yet
Milestone
3.2.5 Release
Development

No branches or pull requests
1 participant
@tomchristie