From ec40b36905d0a71edb4bfae592018b6ae580a492 Mon Sep 17 00:00:00 2001 From: Filipa Lacerda Date: Thu, 9 Aug 2018 12:05:13 +0100 Subject: Removes
sent from backend on tooltips in jobs When backend sends HTML it requires frontend to append it to the DOM causing XSS vulnerabilities. By removing the `
` we avoid those vulnerabilities --- lib/gitlab/ci/status/build/failed.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lib') diff --git a/lib/gitlab/ci/status/build/failed.rb b/lib/gitlab/ci/status/build/failed.rb index 703f0b9217b..508b4814631 100644 --- a/lib/gitlab/ci/status/build/failed.rb +++ b/lib/gitlab/ci/status/build/failed.rb @@ -32,7 +32,7 @@ module Gitlab end def description - "
(#{failure_reason_message})" + "- (#{failure_reason_message})" end def failure_reason_message -- cgit v1.2.3