Add helper method to use implode() with HTML escaping

2017-02-23 18:51:11 -05:00
parent 73b2f51fe5
commit dd579937e3
4 changed files with 23 additions and 2 deletions
--- a/1
+++ b/1
@@ -38,6 +38,7 @@ Bug fixes:

 * Upload files button stay disabled when there are other submit buttons on the same page
 * Hiding subtasks from hidden tasks in dashboard
+* Avoid potential XSS in project overview when listing users (was avoided by default CSP rules)

 Version 1.0.39 (Feb 12, 2017)
 -----------------------------