-
Type: Bug
-
Status: Closed (View Workflow)
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: 2.4 Larks
-
Fix Version/s: 2.6 Larks
-
Labels:None
-
Environment:
Firefox 26
-
Sprint:2.6 Larks
Precondition
- open jcommune main page
Test data
- <xml id="X"><a><b><script>document.vulnerable=true;</script>;
Steps to reproduce
- Enter Test data in field Search
- Look at result
Actual result: layout is broken (see. actual_result_XSS)
Expected result: just topic with "<xml id="X"><a><b><script>document.vulnerable=true;</script>;" text is shown
- relates to
-
JC-1737 Russian symbols entered in field "Search" convert to another
- Closed