gitea/modules
zeripath 172229966c
Prevent panic on fuzzer provided string (#14405)
* Prevent panic on fuzzer provided string

The fuzzer has found that providing a <body> tag with an attribute to
PostProcess causes a panic. This PR removes any rendered html or body
tags from the output.

Signed-off-by: Andrew Thornton <art27@cantab.net>

* Placate lint

* placate lint again

Signed-off-by: Andrew Thornton <art27@cantab.net>

* minor cleanup

Signed-off-by: Andrew Thornton <art27@cantab.net>
2021-01-20 23:10:50 +08:00
..
analyze
auth
avatar
base
cache
charset
context
convert
cron
doctor
emoji
eventsource
generate
git
gitgraph
graceful
hcaptcha
highlight
httpcache
httplib
indexer
lfs
log
markup Prevent panic on fuzzer provided string (#14405) 2021-01-20 23:10:50 +08:00
matchlist
metrics
middlewares
migrations
nosql
notification
options
password
pprof
private
process
public
queue
recaptcha
references
repofiles
repository
secret
session
setting
ssh
storage
structs
svg
sync
task
templates
test
timeutil
translation
upload
uri
user
util
validation