edx/edx-platform — pull request #1989 by flowerhack (2013-12-18 14:26:38+00:00)
Title: Fixing email link injection bug

Several templates used a variable set by the user (the request host header). This led to a vulnerability where an attacker could inject their domain name into these templates (i.e., activation emails). This patch fixes this vulnerability.

LMS-532