[
http://jira.magnolia-cms.com/browse/MAGNOLIA-3805?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jan Haderka reopened MAGNOLIA-3805:
-----------------------------------
don't use escape ... there must be a better way.
> Page titles are not HTML encoded if a user cancels the inline editing in the
> tree
> ----------------------------------------------------------------------------------
>
> Key: MAGNOLIA-3805
> URL: http://jira.magnolia-cms.com/browse/MAGNOLIA-3805
> Project: Magnolia
> Issue Type: Bug
> Security Level: Public
> Components: admininterface
> Affects Versions: 4.4.4
> Reporter: Rory Gibson
> Assignee: Ondřej Chytil
> Priority: Critical
> Fix For: 4.4.5
>
>
> Steps to reproduce:
> * Access the Magnolia Admin and create a new page within the Website
> structure with the title set to '<b>test</b>'
> * Select the title attribut for the page so that it can be edited and then
> select another section of the page
> * At this stage the title is shown with the html code being executed.
> This could be potentially harmful to the system.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/community/mailing-lists.html
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------
