Project

General

Profile

Bug #14666

JS injection into search field

Added by Kyle Hazelwood about 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
High
Assignee:
Kyle Hazelwood
Category:
Server
Target version:
Version 2.0
Start date:
11/23/2016
Due date:
% Done:

0%

Estimated time:
Duration:

Description

Adding script tags to search field allows javascript to be executed in the elog client. I need to strip script tags on submit.

History

#1 Updated by Kyle Hazelwood about 4 years ago

  • Status changed from Assigned to Resolved

Fixed on test server.

#2 Updated by Kyle Hazelwood about 4 years ago

  • Status changed from Resolved to Closed

Released today.

Also available in: Atom PDF