aboutsummaryrefslogtreecommitdiffstats
path: root/template/en/default
diff options
context:
space:
mode:
authorDave Miller <justdave@bugzilla.org>2024-08-29 07:03:41 -0400
committerDave Miller <github@justdave.net>2024-09-03 11:41:55 -0400
commit430a93b7c4df3aadfa2262ef9b8bcc8e77f0eca8 (patch)
tree20ec85a34871ebe12df5aa703df5faaa9cb5495d /template/en/default
parent004ee037b0f49a549648a84b568188ec49bccac7 (diff)
downloadbugs-430a93b7c4df3aadfa2262ef9b8bcc8e77f0eca8.tar
bugs-430a93b7c4df3aadfa2262ef9b8bcc8e77f0eca8.tar.gz
bugs-430a93b7c4df3aadfa2262ef9b8bcc8e77f0eca8.tar.bz2
bugs-430a93b7c4df3aadfa2262ef9b8bcc8e77f0eca8.tar.xz
bugs-430a93b7c4df3aadfa2262ef9b8bcc8e77f0eca8.zip
Bug 1439260: XSS in chart.cgi and report.cgi
Diffstat (limited to 'template/en/default')
-rw-r--r--template/en/default/reports/chart.html.tmpl7
-rw-r--r--template/en/default/reports/create-chart.html.tmpl7
-rw-r--r--template/en/default/reports/report.html.tmpl5
3 files changed, 19 insertions, 0 deletions
diff --git a/template/en/default/reports/chart.html.tmpl b/template/en/default/reports/chart.html.tmpl
index dfab725e6..7004086de 100644
--- a/template/en/default/reports/chart.html.tmpl
+++ b/template/en/default/reports/chart.html.tmpl
@@ -20,6 +20,13 @@
header_addl_info = time
%]
+[% IF debug %]
+ <p>Bugzilla::Chart object:</p>
+ <pre>
+ [% debug_dump FILTER html %]
+ </pre>
+[% END %]
+
<div class="center">
[% imageurl = BLOCK %]chart.cgi?
diff --git a/template/en/default/reports/create-chart.html.tmpl b/template/en/default/reports/create-chart.html.tmpl
index 6b5fa5fe3..9ae25c608 100644
--- a/template/en/default/reports/create-chart.html.tmpl
+++ b/template/en/default/reports/create-chart.html.tmpl
@@ -18,6 +18,13 @@
style_urls = ['skins/standard/buglist.css']
%]
+[% IF debug %]
+ <p>Bugzilla::Chart object:</p>
+ <pre>
+ [% debug_dump FILTER html %]
+ </pre>
+[% END %]
+
[% PROCESS "reports/series-common.html.tmpl"
donames = 1
%]
diff --git a/template/en/default/reports/report.html.tmpl b/template/en/default/reports/report.html.tmpl
index a9cd96551..b669070c2 100644
--- a/template/en/default/reports/report.html.tmpl
+++ b/template/en/default/reports/report.html.tmpl
@@ -61,6 +61,11 @@
%]
[% IF debug %]
+ <p>Data hash:</p>
+ <pre>[% debug_hash FILTER html %]</pre>
+ <p>Data array:</p>
+ <pre>[% debug_array FILTER html %]</pre>
+ <p>Queries:</p>
[% FOREACH query = queries %]
<p>[% query.sql FILTER html %]</p>
[% END %]