Uploaded image for project: 'JCommune'
  1. JCommune
  2. JC-1726

Search XSS: layout can be broken via <

VotersWatchers
    XMLWordPrintable

    Details

    • Sprint:
      2.7 Larks

      Description

      How to reproduce:

      • Enter "Search<" into search query and click Enter

      AR: Layout is broken
      ER: just topic with "Search<" text is shown, layout is the same as for another search query (like "test")

        Attachments

        1. test.png
          514 kB
          Julia Atlygina
        2. XSS-me results for search.jpg
          259 kB
          Vladislav

          Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. JC-1473 /search url should be treated as nothing was input into search field

          • Major - Major loss of function.
          • Closed

            Structure

              Activity

                People

                • Assignee:
                  VladTr Vladislav
                  Reporter:
                  julik Julia Atlygina
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  3 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Structure Helper Panel