openwebwork/webwork2 — pull request #166 by goehle (2013-10-03 21:43:51+00:00)
Title: Additional XSS fixing

This is an initial fix to bug 2768 . This does fix all of the mentioned xss instances, but only implements the first half of Davide's Comment #34. I added scrubber to addmessage (because it does take in html) but I did not go through and clean up addgoodmessage and addbadmessage.