gitlab-org--gitlab-foss/features/steps/project/commits
Robert Speicher 7cc239528e Remove persistent XSS vulnerability in commit_person_link helper
Because we were incorrectly supplying the tooltip title as
`data-original-title` (which Bootstrap's Tooltip JS automatically
applies based on the `title` attribute; we should never be setting it
directly), the value was being passed through as-is.

Instead, we should be supplying the normal `title` attribute and letting
Rails escape the value, which also negates the need for us to call
`sanitize` on it.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15126
2016-04-17 18:42:49 -04:00
..
branches.rb Fix minor stylistic complaints 2015-12-21 22:21:10 -02:00
comments.rb
commits.rb Use Gitlab::Git::DiffCollections 2016-03-03 18:38:44 +01:00
diff_comments.rb
revert.rb Add some spinach specs 2016-02-19 13:14:55 -05:00
tags.rb Add tests to release notes feature 2015-11-06 15:43:59 +01:00
user_lookup.rb Remove persistent XSS vulnerability in commit_person_link helper 2016-04-17 18:42:49 -04:00