journal titles not being escaped
Bug #1720034 reported by
Cecilia Vela Gurovic
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mahara |
Fix Released
|
High
|
Robert Lyon | ||
15.04 |
Fix Released
|
High
|
Unassigned | ||
16.04 |
Fix Released
|
High
|
Unassigned | ||
16.10 |
Fix Released
|
High
|
Unassigned | ||
17.04 |
Fix Released
|
High
|
Unassigned | ||
17.10 |
Fix Released
|
High
|
Robert Lyon |
Bug Description
Steps to test:
- create a journal
- set title to:
<script>
- save
alert is displayed
- add an entry to the journal
- set title to:
<script>
alert is displayed
Changed in mahara: | |
milestone: | none → 17.10.0 |
status: | Confirmed → In Progress |
information type: | Private Security → Public Security |
To post a comment you must log in.
https:/ /reviews. mahara. org/#/c/ 8059/