[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#853189: tracker.debian.org: Ecnoding issue / Code injection through Maintainer field (and probably others)

On Mon, Jan 30, 2017 at 03:43:44PM +0100, Dominik George wrote:
> tracker.debian.org apparently has encoding issues, not of the “schei�
> encoding” kind, but it even seems to break the HTML completely and even
> introduces new elements into the DOM in some way…
> 
> أحمد المحمودي (Ahmed El-Mahmoudy), e.g., in the Maintainer field of
> python-whoosh [1] triggers the issue in the “testing migrations” pane
> (but not in the Maintainer field itself…).

That's coming from the excuses.yaml coming from
https://release.debian.org/britney/excuses.yaml (debian-released CCed):

- excuses:
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=amd64&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">amd64</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=amd64&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=i386&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">i386</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=i386&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=arm64&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">arm64</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=arm64&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=armel&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">armel</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=armel&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=armhf&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">armhf</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=armhf&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=mips&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">mips</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=mips&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=mips64el&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">mips64el</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=mips64el&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=mipsel&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">mipsel</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=mipsel&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=ppc64el&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">ppc64el</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=ppc64el&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - 'missing build on <a href="https://buildd.debian.org/status/logs.php?arch=s390x&pkg=python-whoosh&ver=2.7.0-1.1";
    target="_blank">s390x</a>: python-whoosh, python3-whoosh (from <a href="https://buildd.debian.org/status/logs.php?arch=s390x&pkg=python-whoosh&ver=2.7.0-1";
    target="_blank">2.7.0-1</a>)'
  - Piuparts tested OK - <a href="https://piuparts.debian.org/sid/source/p/python-whoosh.html";>https://piuparts.debian.org/sid/source/p/python-whoosh.html</a>
  is-candidate: false
  item-name: python-whoosh
  maintainer: أحمد المحمودي (Ahmed El-Mahmoudy)
  missing-builds:
    on-architectures:
    - amd64
    - arm64
    - armel
    - armhf
    - i386
    - mips
    - mips64el
    - mipsel
    - ppc64el
    - s390x
    on-unimportant-architectures: []
  new-version: 2.7.0-1.1
  old-binaries:
    2.7.0-1:
    - python-whoosh
    - python3-whoosh
  old-version: 2.7.0-1
  policy_info:
    age:
      age-requirement: 10
      current-age: 0
    piuparts:
      piuparts-test-url: https://piuparts.debian.org/sid/source/p/python-whoosh.html
      test-results: pass
    rc-bugs:
      shared-bugs:
      - '812768'
      unique-source-bugs: []
      unique-target-bugs: []
  reason: []
  source: python-whoosh

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-

Attachment: signature.asc
Description: PGP signature

Reply to: