]> git.vanrenterghem.biz Git - git.ikiwiki.info.git/blob - doc/bugs/multiple_encoding_issues_in_atom.mdwn
HTML-escape error messages (CVE-2016-4561)
[git.ikiwiki.info.git] / doc / bugs / multiple_encoding_issues_in_atom.mdwn
1 Two examples of encoding breakage observed in the wild. In both cases
2 the ampersand needs to be escaped.
3 --[[Joey]] 
5         <link href="http://www.youtube.com/watch?v=Z9hP9lhBDsI&feature=youtube_gdata"/>
7         <category term="vicky&alice" />