I have pushed my signoff of Jeff's and Jason's commits to security/collab/dyrcona/lp1902965_marc_xss.
I noticed that italics and emphasis tags did have an effect in the Angular Staff catalog view. However, script tags were unable to open alerts. I didn't explore this much farther, so that bears looking into. I would be content to consider that a different bug in order to get this into a release sooner.
I have pushed my signoff of Jeff's and Jason's commits to security/ collab/ dyrcona/ lp1902965_ marc_xss.
I noticed that italics and emphasis tags did have an effect in the Angular Staff catalog view. However, script tags were unable to open alerts. I didn't explore this much farther, so that bears looking into. I would be content to consider that a different bug in order to get this into a release sooner.