Fix xss in project name on stream

getsentry · May 8, 2014 · b4c3fcf · b4c3fcf · tipsyhacker · May 10, 2014
1 parent 3dcd207
commit b4c3fcf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/sentry/utils/javascript.py b/src/sentry/utils/javascript.py
@@ -176,7 +176,7 @@ def transform(self, obj, request=None):
             'isPublic': obj.is_public,
             'score': getattr(obj, 'sort_value', 0),
             'project': {
-                'name': obj.project.name,
+                'name': escape(obj.project.name),
                 'slug': obj.project.slug,
             },
             'version': version,