KocsisDaniel/liferay-portal — pull request #203 by laszlocsontos (2012-12-19 11:25:34+00:00)
Title: [TECHNICAL SUPPORT] LPS-31644 Prevent XSS in default value(s) of custom fields

Hi,

The customer reported one more use case where the formerly provided fix did not work: XSS was possible by using the "default value" of custom fields.

Cheers,
Laci.