##// END OF EJS Templates
Fix XSS reported on Security list...
Fix XSS reported on Security list No CVE-ID yet August 18, 2015 ----- Reported to Quantopian by Juan Broullón <thebrowfc@gmail.com>... If you create a new folder in the iPython file browser and set Javascript code as its name the code injected will be executed. So, if I create a folder called "><img src=x onerror=alert(document.cookie)> and then I access to it, the cookies will be prompted. The XSS code is also executed if you access a link pointing directly at the folder. jik ------

File last commit:

r16130:886dd89f
r21633:3ab41641
Show More
install-hooks.sh
9 lines | 232 B | application/x-sh | BashLexer
#!/usr/bin/env bash
DOTGIT=`git rev-parse --git-dir`
TOPLEVEL=`git rev-parse --show-toplevel`
TO=${DOTGIT}/hooks
FROM=${TOPLEVEL}/git-hooks
ln -s ${FROM}/post-checkout ${TO}/post-checkout
ln -s ${FROM}/post-merge ${TO}/post-merge