[
http://jira.magnolia-cms.com/browse/MAGNOLIA-3805?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Philipp Bärfuss updated MAGNOLIA-3805:
--------------------------------------
Summary: Pge titles are not HTML encoded if a user cancels the inline
editing in the tree (was: HTML code being executed when inserted into the
page title field)
> Pge titles are not HTML encoded if a user cancels the inline editing in the
> tree
> ---------------------------------------------------------------------------------
>
> Key: MAGNOLIA-3805
> URL: http://jira.magnolia-cms.com/browse/MAGNOLIA-3805
> Project: Magnolia
> Issue Type: Bug
> Security Level: Public
> Components: admininterface
> Affects Versions: 4.4.4
> Reporter: Rory Gibson
> Assignee: Ondřej Chytil
> Priority: Critical
> Fix For: 4.4.5
>
>
> Steps to reproduce:
> * Access the Magnolia Admin and create a new page within the Website
> structure with the title set to '<b>test</b>'
> * Select the title attribut for the page so that it can be edited and then
> select another section of the page
> * At this stage the title is shown with the html code being executed.
> This could be potentially harmful to the system.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/community/mailing-lists.html
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------
