Skip to content

Commit d3fc5eb

Browse files
committed
[http] fix traceback page xss
1 parent 19b741e commit d3fc5eb

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

Diff for: ajenti/routing.py

+2-1
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
import cgi
12
import socketio
23
import traceback
34

@@ -90,4 +91,4 @@ def respond_error(self, context, exception):
9091
</pre>
9192
</body>
9293
</html>
93-
""" % stack
94+
""" % cgi.escape(stack)

0 commit comments

Comments
 (0)