-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 3.11 Larks
-
Fix Version/s: None
-
Labels:
-
Sprint:3.11 Larks
Preconditions
There is group with name
<script>alert("Name1")</script>
User has admin permissions
Steps to reproduce
1. Go to Administration - Users
2. Search for any existed user
Actual result
Alert window with text "Name1" is displayed, there is no group <script>alert("Name1")</script> in groups list
Expected result
There is no alert window, group <script>alert("Name1")</script> presents in groups list
- Discovered while testing
-
JC-2367 Edit user groups
-
- Closed
-
Test Environment
JCommune 3.11.3150.1b02b6a, Firefox, Chrome
Test Scenario
Preconditions
There is group with name
<script>alert("Name1")</script>
User has admin permissions
Steps
1. Go to Administration - Users
2. Search for any existed user
Actual result = Expected result
There is no alert window, group <script>alert("Name1")</script> presents in groups list
Regression tests:
Users in group, User Groups pages, edit user group popup work as expected
Test results:
Issue can be closed
SUCCESS: Integrated in
JC-UnitTests #3150
JC-2391XSS on users list page (oatkachenko: 1b02b6a19fee381eaf4391b96c3a42c8c2d7a16d)