Hacker News new | ask | show | jobs
by oinopion 5972 days ago
XSS open. http://github.com/ninjagod/patchbin/issues#issue/1
1 comments
antileet 5972 days ago
I disabled escaping because it had trouble rendering XML code. I thought it was safe but I was wrong.

Fixing now. Thanks! [edit] fixed

link
oinopion 5972 days ago
I played a bit with code and I think you could benefit from reading:

http://www.python.org/dev/peps/pep-0008/

http://docs.djangoproject.com/en/dev/topics/forms/

http://docs.djangoproject.com/en/dev/topics/db/models/#many-...

link