← Back to branch summary

~ubuntu-branches/ubuntu/oneiric/empathy/oneiric-security

« back to all changes in this revision

Viewing changes to libempathy-gtk/empathy-account-widget.c

  • Committer: Package Import Robot
  • Author(s): Steve Beattie
  • Date: 2011-10-24 14:56:42 UTC
  • mfrom: (163.1.1 oneiric-proposed)
  • Revision ID: package-import@ubuntu.com-20111024145642-8xktisdsgvrz8qme
Tags: 3.2.0.1-0ubuntu1.1
https://launchpad.net/bugs/879301
* SECURITY UPDATE: remote HTML injection (LP: #879301)
  - debian/patches/50_empathy-CVE-2011-3635-lp879301.patch: escape
    HTML in when displaying other users' names. (Thanks to upstream
    for patch.)
  - CVE-2011-3635, CVE-2011-4170

Show diffs side-by-side

added added

removed removed

Lines of Context:
libempathy-gtk/empathy-account-widget.c
1194
1194
  else if (!tp_strdiff (provider, "org.gnome.OnlineAccounts"))
1195
1195
    {
1196
1196
      /* FIXME: we should publish the .desktop file in some general way */
1197
 
      desktop_info = g_desktop_app_info_new ("goa-prefs.desktop");
 
1197
      desktop_info = g_desktop_app_info_new (
 
1198
          "gnome-online-accounts-panel.desktop");
1198
1199
 
1199
1200
      if (desktop_info == NULL)
1200
 
        g_critical ("Could not locate 'goa-prefs.desktop'");
 
1201
        g_critical ("Could not locate 'gnome-online-accounts-panel.desktop'");
1201
1202
      else
1202
1203
        name = g_app_info_get_name (G_APP_INFO (desktop_info));
1203
1204
    }