Closed
Bug 732525
Opened 13 years ago
Closed 13 years ago
Use Bleach Sanitized HTML instead of raw HTML in project edit form
Categories
(Websites :: mozillalabs.com, defect)
Websites
mozillalabs.com
Tracking
(Not tracked)
VERIFIED
FIXED
1.0
People
(Reporter: pmac, Assigned: jfong)
References
Details
Attachments
(1 file)
|
21.69 KB,
image/png
|
Details |
HTML in django message on profile edit form
For the basic summary and description entry fields this will be much more friendly to use. We could easily convert the entries we already have to markdown, and provide previews and syntax help.
http://daringfireball.net/projects/markdown/
|
||
Updated•13 years ago
|
Target Milestone: --- → 1.1
|
|
||
Updated•13 years ago
|
Target Milestone: 1.1 → 1.0
|
|
||
Updated•13 years ago
|
Assignee: nobody → jfong
|
|
Assignee | |
Comment 1•13 years ago
|
||
using the 'bleach' library as it has passed security review
|
|
||
Updated•13 years ago
|
Summary: Use Markdown instead of raw HTML in project edit form → Use Bleach Sanitized HTML instead of raw HTML in project edit form
|
|
||
Comment 2•13 years ago
|
||
|
|
||
Comment 3•13 years ago
|
||
Jenn, adding this here, let me know if you want a sep bug. Looking at the site after the last update I saw html appearing in the django flash messages.
The screenshot shows the flash message when registering for the first time.
|
||
Comment 4•13 years ago
|
||
Commits pushed to master at https://github.com/mozilla/betafarm
https://github.com/mozilla/betafarm/commit/2cb8d4211ea13ef7ee43f3963a031d1d64a741e1
added bleach; fix bug 732525
https://github.com/mozilla/betafarm/commit/5d81679edcb18ca106591eaa0cdf63cefa123f92
Merge pull request #50 from ednapiranha/bug732525
added bleach; fix bug 732525
|
|
||
Updated•13 years ago
|
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
|
|
||
Updated•12 years ago
|
Component: Betafarm → mozillalabs.com
You need to log in
before you can comment on or make changes to this bug.
Description
•