- **status**: open --> invalid - **Comment**: I see no XSS here. If you have an example where javascript runs, please provide it. In this case, input form fields are rendered, but no javascript runs. See also [#4644] for removing form fields from the HTML whitelist.
--- ** [tickets:#7571] XSS? on forum** **Status:** invalid **Milestone:** limbo **Created:** Wed Jul 16, 2014 10:34 AM UTC by Shuji Sado **Last Updated:** Wed Jul 16, 2014 10:34 AM UTC **Owner:** nobody http://sourceforge.net/p/passwordsafe/discussion/134801/thread/8bc859a2/ please check. --- Sent from sourceforge.net because [email protected] is subscribed to https://sourceforge.net/p/allura/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.
