← Back to branch summary

~ubuntu-branches/debian/squeeze/movabletype-opensource/squeeze

« back to all changes in this revision

Viewing changes to tmpl/cms/list_role.tmpl

  • Committer: Bazaar Package Importer
  • Author(s): Dominic Hargreaves
  • Date: 2008-11-18 17:55:33 UTC
  • Revision ID: james.westby@ubuntu.com-20081118175533-0iwmvwff1wlr2umw
Tags: 4.2.1-3
http://bugs.debian.org/503114
* Urgency high due to security fix targetted at lenny
* Fix multiple XSS issues (CVE-2008-4634). Thanks to Nico Golde for
  providing the patch, extracted from a release made by
  Six Apart KK (closes: #503114)

Show diffs side-by-side

added added

removed removed

Lines of Context:
tmpl/cms/list_role.tmpl
73
73
            <td><mt:var name="description" escape="html"></td>
74
74
            <td><mt:var name="members"></td>
75
75
            <td><mt:var name="weblogs"></td>
76
 
            <td><mt:if name="created_by"><mt:var name="created_by"><mt:else><em><__trans phrase="System"></em></mt:if></td>
 
76
            <td><mt:if name="created_by"><mt:var name="created_by" escape="html"><mt:else><em><__trans phrase="System"></em></mt:if></td>
77
77
        </tr>
78
78
    <mt:if name="view_expanded">
79
79
        <tr class="<mt:if name="__odd__">odd<mt:else>even</mt:if> slave<mt:unless name="members"> inactive</mt:unless>">