Bug 6958

Summary: Clean up user input before saving in database
Product: [Build System, Metadata & Runtime] Toaster Reporter: Michael Wood <michael.g.wood>
Component: toasterAssignee: Michael Wood <michael.g.wood>
Status: VERIFIED INVALID QA Contact: Mihail Stanciu <stanciux.mihail>
Severity: normal    
Priority: Medium+ CC: alexandru.c.georgescu, alexandru.damian, belen.barros.pena, bluelightning, cristiana.voicu
Version: unspecified   
Target Milestone: 1.8 M3   
Hardware: x86   
OS: Multiple   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: No (bug/feature does not impact docs)

Description Michael Wood 2014-11-12 18:38:14 UTC
Any data coming in from the user should be cleaned for html tags and other problem characters before being stored in the database.
Comment 1 Michael Wood 2015-02-13 17:36:40 UTC
After some further investigation I don't think this layer in the stack is where we would have issues. The template engine will escape the context and all we'll gain are with issues where data is double escaped.
Comment 2 Mihail Stanciu 2015-03-31 13:57:30 UTC
Verified.