Reviewed: https://reviews.mahara.org/8224 Committed: https://git.mahara.org/mahara/mahara/commit/77cc040b93c031d9e54edad5616d29e14de6664f Submitter: Robert Lyon ([email protected]) Branch: 15.04_STABLE
commit 77cc040b93c031d9e54edad5616d29e14de6664f Author: Robert Lyon <[email protected]> Date: Thu Sep 28 14:07:40 2017 +1300 Bug 1720034: Journal/Journal post title not being escaped in delete button behatnotneeded Change-Id: I6f0c82a74e0d60614230aac1d4fc3884eae387a5 Signed-off-by: Robert Lyon <[email protected]> (cherry picked from commit c367be4d30e4b0dd45cd76373b19c7393f7809ee) (cherry picked from commit 465b7df21db3c4cb2780475d46ec77bcebda8831) -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1720034 Title: journal titles not being escaped Status in Mahara: Fix Released Status in Mahara 15.04 series: In Progress Status in Mahara 16.04 series: In Progress Status in Mahara 16.10 series: In Progress Status in Mahara 17.04 series: In Progress Status in Mahara 17.10 series: Fix Released Bug description: Steps to test: - create a journal - set title to: <script>alert(1)</script> - save alert is displayed - add an entry to the journal - set title to: <script>alert(1)</script> alert is displayed To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1720034/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~mahara-contributors Post to : [email protected] Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
