[Zope-Checkins] CVS: Zope/doc - CHANGES.txt:1.535.2.73

Florent Guillaume fg@nuxeo.com
Sun, 22 Dec 2002 11:16:44 -0500


Update of /cvs-repository/Zope/doc
In directory cvs.zope.org:/tmp/cvs-serv2325/doc

Modified Files:
      Tag: Zope-2_6-branch
	CHANGES.txt 
Log Message:
Fixed insufficient quoting in a number of DTML files when displaying
the title. This closes some actual and potential XSS holes. (Collector #595)


=== Zope/doc/CHANGES.txt 1.535.2.72 => 1.535.2.73 ===
--- Zope/doc/CHANGES.txt:1.535.2.72	Fri Dec 20 10:39:27 2002
+++ Zope/doc/CHANGES.txt	Sun Dec 22 11:16:13 2002
@@ -35,6 +35,9 @@
       - Collector #700: History tab of Historical objects caused error
         in storages that did not support history.
 
+      - Collector #595: There was insufficient quoting in some dtml
+        files.
+
   Zope 2.6.1 beta 1
 
     Bugs Fixed