From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jason at zx2c4.com (Jason A. Donenfeld) Date: Sun, 12 Jan 2014 22:18:30 +0100 Subject: [PATCH 2/3] ui-shared: URL-escape script_name In-Reply-To: <743715d4d544aac87ea7707e47eef6e115f908f5.1389555852.git.john@keeping.me.uk> References: <432e1f40c0d887db602ec9411ae16c45896a54f5.1389555852.git.john@keeping.me.uk> <743715d4d544aac87ea7707e47eef6e115f908f5.1389555852.git.john@keeping.me.uk> Message-ID: Are there any circumstances in which this could have prior lead to an XSS?