Merged #181 "Sanitize ticket text at presentation time to avoid unintended ...

James Moger

2014-09-17 802a6b05e5850161f740366cb59a182a96abe069

 src/main/java/com/gitblit/wicket/panels/TicketListPanel.java

@@ -130,9 +130,10 @@
                     Repository db = app().repositories().getRepository(repository.name);
                     BugtraqProcessor btp  = new BugtraqProcessor(app().settings());
                     String content = btp.processText(db, repository.name, labelItem.getModelObject());
                     String safeContent = app().xssFilter().relaxed(content);
                     db.close();

                     label = new Label("label", content);
                     label = new Label("label", safeContent);
                     label.setEscapeModelStrings(false);

                     tLabel = app().tickets().getLabel(repository, labelItem.getModelObject());