[phpBT-dev] Re: Security issue

[Jirka P. <fi...@us...>]

> Greater than and less than signs should be translated to their html
> entity equivalents on output.  If this isn't happening in the bug
> comments or elsewhere then it should be fixed.

There is line #360 in bug.php, where it is fixed for comments, but
commented now. I think, it'll be better to have configuration option for
it. But there are other scipts/templates, which are displaying something.
The question is: "To fix it before or after release 0.8.2?"

Jirka