#1010 gateway_approvals.py renders error text into HTML without escaping (XSS)

in-progress high security Created 2026-10-20 02:38 · Updated 2026-10-20 02:39

Description

Edit

EARS: When the approval gateway renders an HTML page, every interpolated value shall be HTML-escaped. Found by the #911 sweep.

Comments

Loading comments...

Context

Loading context...

Audit History

View All

Loading audit history...