Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-151435

Workflow Source is allowing user to turn code into characters

Description

    Description:
    Workflow Source is allowing user to turn code into characters

    Steps to Reproduce:

    1. Go to Workflow > Process Builder
    2. Add a New Workflow and go to Source View
    3. Import the attached xml file and see the tag
      <name>&apos;&quot;&gt;&lt;script&gt;alert(/def-name/)&lt;/script&gt;</name>
      
    4. Click on Diagram View button
    5. Click on Source view button

    Expected Result:
    The tag name should remain

    <name>&apos;&quot;&gt;&lt;script&gt;alert(/def-name/)&lt;/script&gt;</name>
    

    Actual Result:
    The tag name has changed to

    <name>'"><script>alert(/def-name/)</script></name
    

    Verified on master : 3e03bc665911e43653095ffb59c1b94fe5a6d994

    Attachments

      Activity

        People

          henrique.pereira Henrique Pereira
          ana.buchmann Ana Buchmann
          Kiyoshi Lee Kiyoshi Lee
          Henrique Pereira Henrique Pereira
          Votes:
          0 Vote for this issue
          Watchers:
          0 Start watching this issue

          Dates

            Created:
            Updated:
            Resolved:
            24 weeks, 6 days ago

            Packages

              Version Package
              7.4.3.41 CE GA41
              Master