Fix 8756: "Most active bugs" summary XSS vulnerability

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/branches/BRANCH_1_1_0@4896 f5dc347c-c33d-0410-90a0-b07cc1902cb9
mantisbt · Jan 16, 2008 · fabe393 · fabe393
1 parent 4b22aa2
commit fabe393
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/summary_api.php b/core/summary_api.php
@@ -322,7 +322,7 @@ function summary_print_by_activity() {
 			if ( $t_count++ == 10 ) break;
 
 			$t_bugid = string_get_bug_view_link( $row['id'] );
-			$t_summary = $row['summary'];
+			$t_summary = string_html_specialchars( $row['summary'] );
 			$t_notescount = $row['count'];
 
 			print "<tr " . helper_alternate_class() . ">\n";