edx/edx-platform — pull request #1992 by flowerhack (2013-12-18 18:08:45+00:00)
Title: LMS-1589 (v2)

Several templates used a variable set by the user (the request host header). This led to a vulnerability where an attacker could inject their domain name into these templates (i.e., activation emails). This patch fixes this vulnerability.

LMS-532