Commit 554c81bc authored by Tres Seaver's avatar Tres Seaver Committed by GitHub

Merge pull request #86 from zopefoundation/apply-plonehotfix-20170717-213

Apply plonehotfix 20170717 [2.13]
parents c668b3ef e130ee11
...@@ -8,6 +8,8 @@ http://docs.zope.org/zope2/ ...@@ -8,6 +8,8 @@ http://docs.zope.org/zope2/
2.13.26 (unreleased) 2.13.26 (unreleased)
-------------------- --------------------
- Fixed reflective XSS in findResult.
This applies PloneHotfix20170117. [maurits]
2.13.25 (2017-01-13) 2.13.25 (2017-01-13)
......
...@@ -128,7 +128,7 @@ your search terms below. ...@@ -128,7 +128,7 @@ your search terms below.
</div> </div>
</TD> </TD>
<TD ALIGN="LEFT" VALIGN="TOP"> <TD ALIGN="LEFT" VALIGN="TOP">
<INPUT TYPE="TEXT" NAME="obj_ids:tokens" SIZE="30" VALUE="<dtml-var "' '.join(obj_ids or [])">"> <INPUT TYPE="TEXT" NAME="obj_ids:tokens" SIZE="30" VALUE="<dtml-var "' '.join(obj_ids or [])" html_quote>">
</TD> </TD>
</TR> </TR>
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment