From: Tom Hughes <tom@compton.nu>
Date: Tue, 15 Jan 2008 00:26:01 +0000 (+0000)
Subject: Escape message titles and bodies. This is an emergency fix as some genius
X-Git-Tag: live~9063
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/1e54573bae7eed568e99ebc0b0d448170f08c880?hp=1e54573bae7eed568e99ebc0b0d448170f08c880

Escape message titles and bodies. This is an emergency fix as some genius
has decided to report this XSS problem to a public mailing list. Unfortunately
it means that some functionality (links in messages etc) has been lost for now.
---