Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-50957

When add a list to ddl, the publish/save as draft button is disable

    Details

      Description

      Steps to reproduce:
      1. Start up server, and log in portal.
      2. Go to Control Panel -> Content -> Dynamic Data Lists.
      3. Create new Data Definition, add HTML field.
      4. Create new list based on the definition.
      5. Add new entry into the list.
      6. Inside HTML field switch to "Source".
      7. Add <img src=x onerror=alert(/xss/) />, and click publish or save as draft button.

      Expected behavior: The list should be published or saved as draft.
      Actual behaviour: The publish/save as draft button is disable, only cancel button is enable.

      Reproduced on Master @309b2eaa8e4d8ce4bbafb2dd6e74efc430d4ab16

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              joyce.wang Joyce Wang
              Reporter:
              joyce.wang Joyce Wang
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                6 years, 7 weeks, 4 days ago

                  Packages

                  Version Package
                  7.0.0 M3