-
Type: Bug
-
Status: Closed (View Workflow)
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: 1.9 Larks
-
Fix Version/s: 2.1 Larks
-
Labels:None
-
Sprint:2.1 Larks
Steps to reproduce
1. User creates new topic, fills title and message content fields with correct text
2. User creates poll with title
<script>alert("Hacked poll title")</script>
and one of poll answer is
<script>alert("Hacked poll answer")</script>
3. Press "Preview" button
Actual result
User receives two pop up windows with text
Hacked poll title
and
Hacked poll answer
Poll title and answer are empty
Expected result
There is no any additional windows