Uploaded image for project: 'Bitbucket Data Center'
  1. Bitbucket Data Center
  2. BSERV-3910

Stash doesn't escape HTML in commit messages

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: High High
    • None
    • None
    • Rendering - Markdown Syntax
    • None

      Stash doesn't escape HTML in commit messages at least in pull requests which creates a security risk if people submitting pull requests aren't fully trusted.

              Unassigned Unassigned
              4c10a4730e87 m_gol
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: