Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-123328

Two message board title displayed after add a source

    Details

    • Fix Priority:
      4

      Description

      Step to reproduce:

      1. Add a Message Board portlet
      2. Add a new Thread
      3. Type Subject 'MB Thread Message Subject'
      4. Click Source button and type this '[img]asd[font= onerror=alert(/This is an XSS Message/.source)//]FF[/font][/img]'
      5. Publish it

      Actual result: can see two MB Thread Message Subject
      Expect result: Only one MB Thread Message Subject

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              fortunato.maldonado Fortunato Maldonado
              Reporter:
              sylvia.luan Sylvia Luan
              Participants of an Issue:
              Recent user:
              Sylvia Luan
              Engineering Assignee:
              Fortunato Maldonado
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                46 weeks, 1 day ago

                  Packages

                  Version Package
                  7.0.X