浏览代码

Add prorper escaping of url in issue form

Odin Ugedal 9 年之前
父节点
当前提交
c9321550e0
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      templates/repo/issue/new_form.tmpl

+ 1 - 1
templates/repo/issue/new_form.tmpl

@@ -1,4 +1,4 @@
-<form class="ui comment form grid" action="{{.Link}}" method="post">
+<form class="ui comment form grid" action="{{EscapePound .Link}}" method="post">
 	{{.CsrfTokenHtml}}
 	{{if .Flash}}
 		<div class="sixteen wide column">