Details

      Description

      Steps to reproduce:

      1. Navigate to Account Settings
      2. Change First, Middle, and Last Name to "<script>alert(123)</script>"
      3. Navigate to Sites > Content > Form
        #Add new form
        #Go to "descriptive", "Icon" View

      Expected Result:
      UserName should show as <script>alert(123)</script>
      Actual Result:
      UserName escape wrong.

        Attachments

        1. Fixed1.PNG
          Fixed1.PNG
          25 kB
        2. Fixed2.PNG
          Fixed2.PNG
          10 kB
        3. Reproduced1.PNG
          Reproduced1.PNG
          27 kB
        4. Reproduced2.PNG
          Reproduced2.PNG
          78 kB

          Activity

            People

            Assignee:
            harry.chai Harry Chai
            Reporter:
            david.zhang David Zhang (Inactive)
            Participants of an Issue:
            Recent user:
            Esther Sanz
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              4 years, 40 weeks, 4 days ago

                Packages

                Version Package
                7.0.0 Beta 4