[perl #38183] [TODO] smoke - possible 'Cross Site Scripting' issue

[Joshua Hoblitt]

# New Ticket Created by Joshua Hoblitt
# Please include the string: [perl #38183]
# in the subject line of all future correspondence about this issue.
# <URL: https://rt.perl.org/rt3/Ticket/Display.html?id=38183 >

The current smoke system submits HTML directly to the smoke server.
This is just begging to be abused. Instead the system should submit raw
data that can be validated by the smoke server and then marked up for
presentation.

-J

--

[Florian Ragwitz]

I'm currently about to do a rewrite of smokeserv that fixes this.

Regards,
Flo

--
BOFH excuse #263:
It's stuck in the Web.