XSS vulnerability on trackers based on devel or responsive templates

Hi all:

An XSS issue with trackers based on devel or responsive templates
have been reported. I am waiting on a CVE for it.

If you have a devel or responsive template based tracker (check the
Name field in the tracker's TEMPLATE-INFO.txt), you want to replace
this construct in your templates:

     tal:content="structure context/MUMBLE/plain"

with

     tal:content="context/MUMBLE/plain"

where 'MUMBLE' is something like 'title'.

In the original templates this construct is all on one line. If you
made modifications it may be split across lines. Make sure to fix
those too.

Note that this construct has not been used by the classic template
since at least 2009. If your tracker pre-dates 2009, you should check
to see if this construct is used.

I still expect to release Roundup 2.5.0 on Sunday.

Thanks to 4bug of ChaMd5 Security Team H1 Group who disclosed the issue.

-- rouilj