AntarcticleIcon indicating the project type

Antarcticle

Uploaded image for project: 'Antarcticle'
  1. Antarcticle
  2. ANTARCTICLE-126

XSS in find box

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.0 Penguins
    • Fix Version/s: 1.0.1 Penguins
    • Labels:
      None
    • Sprint:
      2.0 Penguins

      Description

      Steps to reproduce:

      • Put into the search box on the main page: 
        <style> *{border: solid 1px red;}</style>

      AR: all the elements on the page are bordered with red.
      ER: the input is treated as tags

        Attachments

        Structure

        (does not include ANTARCTICLE-126)
        Open
        History

          Activity

          Ascending order - Click to sort in descending order
          Hide
          Permalink
          wedens Kirill Afonin added a comment -

          it's not XSS. you cant give someone link with some malicious script inside.

          Show
          wedens Kirill Afonin added a comment - it's not XSS. you cant give someone link with some malicious script inside.
          Hide
          Permalink
          ctapobep Stanislav Bashkyrtsev added a comment -

          Well, actually you can. Btw, some why when I enter <head> as a tag, I can't just press on this tag because it leads to nowhere.

          Show
          ctapobep Stanislav Bashkyrtsev added a comment - Well, actually you can . Btw, some why when I enter <head> as a tag, I can't just press on this tag because it leads to nowhere.
          Hide
          Permalink
          wedens Kirill Afonin added a comment - - edited

          it's not malicious and it's not "cross-site" it leads to nowhere because html stripped from tag name before output

          Show
          wedens Kirill Afonin added a comment - - edited it's not malicious and it's not "cross-site" it leads to nowhere because html stripped from tag name before output
          Hide
          Permalink
          ctapobep Stanislav Bashkyrtsev added a comment -

          Well, it's still something that can disappoint user

          Show
          ctapobep Stanislav Bashkyrtsev added a comment - Well, it's still something that can disappoint user
          Hide
          Permalink
          wedens Kirill Afonin added a comment -

          normal user wouldn't enter html tags here

          Show
          wedens Kirill Afonin added a comment - normal user wouldn't enter html tags here
          Hide
          Permalink
          varro Artem R added a comment -

          Test Environment
          Firefox 17.0.1, Chrome 23.0.1271.97, Opera 12.11 Build:1661

          Test Scenario
          Steps
          1. Put into the search field 

          <style> *{border: solid 1px red;}</style>


          Actual result - entered text handled as tag
          Expected result - entered text handled as tag

          Regression tests:
          Search for tags works as usual

          Test results:
          Bug should be close

          Show
          varro Artem R added a comment - Test Environment Firefox 17.0.1, Chrome 23.0.1271.97, Opera 12.11 Build:1661 Test Scenario Steps 1. Put into the search field <style> *{border: solid 1px red;}</style> Actual result - entered text handled as tag Expected result - entered text handled as tag Regression tests: Search for tags works as usual Test results: Bug should be close
          Hide
          Permalink
          julik Julia Atlygina added a comment -

          Artem R did you tru also other XSS and sql injection for this field?

          Show
          julik Julia Atlygina added a comment - Artem R did you tru also other XSS and sql injection for this field?

            People

            • Assignee:
              varro Artem R
              Reporter:
              ctapobep Stanislav Bashkyrtsev
            • Votes:
              0 Vote for this issue
              Watchers:
              Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Structure Helper Panel