-
Type:
Bug
-
Status: Open (View Workflow)
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: 3.13 Larks
-
Fix Version/s: None
-
Labels:None
-
Environment:
JCommune 3.13.3184.ed3a86a
Prod
Preconditions: user should have ADD_POST permission; QnA topic is created.
Steps to reproduce:
- Open QnA topic with.
- Click 'Answer to Question' button.
- Leave the answer's body empty.
- Click 'Answer to Question' button.
Actual result: topic's title is changed to
${htmlEscaper.process(${question.title})}
. See screenshot
Expected result: title isn't changed
- relates to
-
JC-2373 XSS in Q&A topic title
-
- Closed
-