From df1d4a2d2a13e566a8f8f51844e369508a0ef6dc Mon Sep 17 00:00:00 2001
From: Pierre-Yves Chibon <pingou@pingoured.fr>
Date: Aug 31 2015 12:41:25 +0000
Subject: Forbid <img> tags in issue title


---

diff --git a/pagure/templates/issue.html b/pagure/templates/issue.html
index cf13032..7046503 100644
--- a/pagure/templates/issue.html
+++ b/pagure/templates/issue.html
@@ -37,7 +37,7 @@
 
 <h2>
     <span class="issueid">#{{ issueid }}</span> <span id="issuetitle">{{
-        issue.title | noJS | safe }}</span>
+        issue.title | noJS("img") | safe }}</span>
     {% if authenticated and (repo_admin or g.fas_user.username == issue.user.username) %}
     -  <a href="{{ url_for('edit_issue', username=username,
                   repo=repo.name, issueid=issueid) }}">
diff --git a/pagure/templates/issues.html b/pagure/templates/issues.html
index ee0a33b..813e3e1 100644
--- a/pagure/templates/issues.html
+++ b/pagure/templates/issues.html
@@ -84,7 +84,7 @@
             <td>
                 <a href="{{ url_for('view_issue', username=username,
                     repo=repo.name, issueid=issue.id) }}">
-                    {{ issue.title | noJS | safe }}
+                    {{ issue.title | noJS("img") | safe }}
                 </a>
             </td>
             <td>