[
https://issues.apache.org/jira/browse/SYNCOPE-1549?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17183256#comment-17183256
]
ASF subversion and git services commented on SYNCOPE-1549:
----------------------------------------------------------
Commit 713ae29ab80da5fed27f66cfaed3b5526edd155b in syncope's branch
refs/heads/2_0_X from Andrea Patricelli
[ https://gitbox.apache.org/repos/asf?p=syncope.git;h=713ae29 ]
[SYNCOPE-1549] whitelisted javascript in href attributes
> Groups select opens a popup when removing a group
> -------------------------------------------------
>
> Key: SYNCOPE-1549
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1549
> Project: Syncope
> Issue Type: Bug
> Components: enduser
> Affects Versions: 2.0.14, 2.1.5
> Environment: Google Chrome 80.0.3987.132
> Mozilla Firefox 74.0
> Reporter: Andrea Patricelli
> Priority: Major
> Fix For: 2.0.16, 2.1.7
>
>
> # Open enduser login page and click on "Registration"
> # Go to the Groups step and add a group
> # Remove the group just added and you'll notice on Chrome a popup and on
> FIrefox an error page showing undefined JavaScript execution.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
