XSS vulnerability found from http://http://qa.debian.org

[Henri Salo <henri@nerv.fi>]

Hello,

I found XSS vulnerability from http://qa.debian.org/ service. Here is proof of
concept:

http://qa.debian.org/developer.php?login=%27%22%3E%3Cmarquee%3E&comaint=yes

Please reply when this has been fixed, thank you.

---
Henri Salo

Attachment: signature.asc
Description: Digital signature