Cross-Site Scripting: Reflected

[QiAnXinCodeSafe]

luv-yocto/bitbake/lib/toaster/toastergui/views.py

Lines 1812 to 1817 in 10bda4c

	def projectconf(request, pid):
	try:
	prj = Project.objects.get(id = pid)
	except Project.DoesNotExist:
	return HttpResponseNotFound("<h1>Project id " + pid + " is unavailable</h1>")

Sending unvalidated data to a web browser can result in the browser executing malicious code.