Bug 6958 - Clean up user input before saving in database
Summary: Clean up user input before saving in database
Status: VERIFIED INVALID
Alias: None
Product: Toaster
Classification: Build System, Metadata & Runtime
Component: toaster (show other bugs)
Version: unspecified
Hardware: x86 Multiple
: Medium+ normal
Target Milestone: 1.8 M3
Assignee: Michael Wood
QA Contact: Mihail Stanciu
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2014-11-12 18:38 UTC by Michael Wood
Modified: 2015-03-31 13:57 UTC (History)
5 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Wood 2014-11-12 18:38:14 UTC 
Any data coming in from the user should be cleaned for html tags and other problem characters before being stored in the database.
Comment 1 Michael Wood 2015-02-13 17:36:40 UTC 
After some further investigation I don't think this layer in the stack is where we would have issues. The template engine will escape the context and all we'll gain are with issues where data is double escaped.
Comment 2 Mihail Stanciu 2015-03-31 13:57:30 UTC 
Verified.