| Summary | It's possible to inject javascript on Kronolith |
| Queue | Kronolith |
| Queue Version | Git master |
| Type | Bug |
| State | Resolved |
| Priority | 1. Low |
| Owners | jan (at) horde (dot) org |
| Requester | goncalo.queiros (at) portugalmail (dot) net |
| Created | 09/04/2009 (5970 days ago) |
| Due | |
| Updated | 01/13/2010 (5839 days ago) |
| Assigned | |
| Resolved | 09/04/2009 (5970 days ago) |
| Github Issue Link | |
| Github Pull Request | |
| Milestone | |
| Patch | No |
Element.update() and Element.insert() don't escape content and eval
scripts automatically. Escape any plain text being inserted (
Bug #8552).http://git.horde.org/diff.php/kronolith/js/kronolith.js?rt=horde-git&r1=fabc16d8ac224bbcf5fbe2f5ff4ac26af563d69c&r2=62b96aed490816b1f2a5c7334ab21bb324455df9
State ⇒ Resolved
Priority ⇒ 1. Low
Patch ⇒ No
Milestone ⇒
Queue ⇒ Kronolith
Summary ⇒ It's possible to inject javascript on Kronolith
Type ⇒ Bug
State ⇒ Unconfirmed
least in the Title field)