Inline Javascript executed when edited - Redmine

Inline Javascript executed when edited

Added by Joe Blauer almost 16 years ago

Has anyone noticed that typing valid javascript (complete with script tags) in the body of an issue comment, executes that javascript (and doesn't display it) when that comment is edited?

Replies (3)

RE: Inline Javascript executed when edited - Added by Jerry Hilts almost 16 years ago

<script type="text/javascript">
alert("Uh oh!");
</script>

RE: Inline Javascript executed when edited - Added by Jean-Philippe Lang almost 16 years ago

Fixed in r2143.

RE: Inline Javascript executed when edited - Added by Joe Blauer almost 16 years ago

Thanks!

(1-3/3)