Tickets :: Comment on [#8552] It's possible to inject javascript on Kronolith

* Your Email Address
* Spam protection	Enter the letters below: ._.. ..__ .__ . . \| \|_/ \| \[__)\|\ \| _\|_\| \\|__/\| \| \\|
Comment	> Changes have been made in Git for this ticket: > > Element.update() and Element.insert() don't escape content and eval > scripts automatically. Escape any plain text being inserted (Bug > #8552). > > http://git.horde.org/diff.php/kronolith/js/kronolith.js?rt=horde-git&r1=fabc16d8ac224bbcf5fbe2f5ff4ac26af563d69c&r2=62b96aed490816b1f2a5c7334ab21bb324455df9
Attachment
Watch this ticket