web/961: GNATSweb doesn't escape <foo> and similar in synopses

Joseph Myers jsm28@cam.ac.uk
Sat Dec 2 07:46:00 GMT 2000


>Number:         961
>Category:       web
>Synopsis:       GNATSweb doesn't escape <foo> and similar in synopses
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    gerald
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Dec 02 07:46:00 PST 2000
>Closed-Date:
>Last-Modified:
>Originator:     Joseph S. Myers
>Release:        2.97 20001202 (experimental)
>Organization:
none
>Environment:
System: Linux decomino 2.2.17 #1 Mon Sep 4 20:22:16 UTC 2000 i686 unknown
Architecture: i686

	
host: i686-pc-linux-gnu
build: i686-pc-linux-gnu
target: i686-pc-linux-gnu
configured with: ../gcc-cvs/configure --prefix=/opt/gcc/snapshot --disable-shared --enable-threads=posix --with-system-zlib
>Description:

GNATSweb fails to escape < and > in synopses when producing a table of
search results.

>How-To-Repeat:

Do a query or advanced query on GNATSweb that includes c/448 - or this
bug - in the table of results.

>Fix:

Escape HTML special characters in synopses when producing tables of
query results.
>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the Gcc-bugs mailing list