Inline Javascript executed when edited - Redmine

Inline Javascript executed when edited

Added by Joe Blauer over 13 years ago

Has anyone noticed that typing valid javascript (complete with script tags) in the body of an issue comment, executes that javascript (and doesn't display it) when that comment is edited?

Replies (3)

RE: Inline Javascript executed when edited - Added by Jerry Hilts over 13 years ago

<script type="text/javascript">
alert("Uh oh!");
</script>

RE: Inline Javascript executed when edited - Added by Jean-Philippe Lang over 13 years ago

Fixed in r2143.

RE: Inline Javascript executed when edited - Added by Joe Blauer over 13 years ago

Thanks!

(1-3/3)