#3733 Fix escaping on PR diffs
Merged by pingou. Opened by ryanlerch.
ryanlerch/pagure pr-diff-escaping  into  master

Download 3733.patch

rebased onto 8153ebc6a44164d712395d76b6ca36338f9d8da9

rebased onto 1fffee7e5d8df220d411ba646000d9e5f749aaee

Found and fix the style issue, I'm confident the tests will pass, so let's merge this one :)

Pull-Request has been merged by pingou

This commit looks like it fixes cross-site scripting vulnerabilities, therefore the update/version with this change should be promoted as a security update to ensure that all users know that it is important to update.

@till this has been released in 5.0.1 released on September 27th https://docs.pagure.org/pagure/changelog.html#id5 which was advertised as a security update.

Metadata