OpenStack Dashboard (Horizon)

  1. Bug #1322197
  2. Comment #5

Comment 5 for bug 1322197

Revision history for this message
Matthias Runge (mrunge) wrote : Re: Persistent XSS in OpenStack Havana UI for Network Name (CVE-2014-3474)

The question is here, if it's desirable to be able to name a network like an html tag:
<your name here>
or if we should scrub those ambersamps at all.

A proposal to sanitize names and to escape js is in the patch.