Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 1.5.x
    • Fix Version/s: 1.5.x, 1.5.2.32
    • Component/s: DataTable
    • Labels:
      None

      Description

      XSS issue in AUI Datatable.

      Steps to reproduce:

      1. Open FormBuilder Demo
      2. Change field label to the following
        '"><img src=x onerror=alert(1)>
        

      Expected results:
      Field label will display "'"><img src=x onerror=alert(1)>"

      Actual results:
      Alert will appear

        Attachments

          Activity

            People

            • Assignee:
              jonathan.mak Jonathan Mak
              Reporter:
              jonathan.mak Jonathan Mak
              Participants of an Issue:
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                4 years, 34 weeks, 1 day ago

                Packages

                Version Package
                1.5.x
                1.5.2.32