opensource/galaxy
3
0
Fork 0
mirror of https://github.com/galaxyproject/galaxy.git synced 2026-10-28 02:58:18 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix an XSS reflection vulnerability on the workflow import form.

Browse Source
This commit is contained in:
Nate Coraor
2015-08-12 16:43:52 -04:00
parent 0972c14576
commit cbae8fab67
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/galaxy/webapps/galaxy/controllers/workflow.py
+1 -1
View File
@@ -1063,7 +1063,7 @@ class WorkflowController( BaseUIController, SharableMixin, UsesStoredWorkflowMix
try:
workflow_data = urllib2.urlopen( url ).read()
except Exception, e:
message = "Failed to open URL: <b>%s</b><br>Exception: %s" % ( url, str( e ) )
message = "Failed to open URL: <b>%s</b><br>Exception: %s" % ( escape( url ), escape( str( e ) ) )
status = 'error'
elif workflow_text:
# This case occurs when the workflow_text was sent via http from the tool shed.