djblets/djblets — pull request #4 by svetlyak40wt (2012-12-07 13:29:01+00:00)
Title: Fixes potential XSS at any page containing grid.

Every site, containing datagrids, can be hacked,
using simple XSS, leading to cookies leak.

To reproduce the problem, go to any site, wich uses
djblets.datagrid. For example, open:

Note, that ?111'%3balert(document.cookie)//222=1 was added to the end of the URL. That is the way, how a cookie thief will prepare the URL for his victim.

Then click to any table's header and you'll see an alert box with all
your cookies.