Details

    • Branch Version/s:
      6.1.x
    • Backported to Branch:
      Committed
    • Fix Priority:
      3
    • Similar Issues:
      Show 4 results 

      Description

      1) Login as 'test@liferay.com' / 'test'.
      2) Navigate to 'My Community Public Page'.
      3) Add a Page.
      4) Add the 'Activities Portlet' and the 'Blogs Portlet'.
      5) Add a blog entry with the following titles:

      <script>alert(document.domain)</script>
      <script>alert(document.domain)
      <script>alert(document.domain)</script>
      <script>alert(document.domain)

        • Notice if you view these entries in the Activities portlet the HTML will be escaped **
        • the entries will be displayed like the following: **

      <script>alert(document.domain)</script>
      <script>alert(document.domain)

      alert(document.domain)

      I've attached a picture of what they will look will be displayed.

        Issue Links

          Activity

          Transition Time In Source Status Execution Times Last Executer Last Execution Date
          Open Open Resolved Resolved
          592d 1h 17m 1 Michael Saechang 18/Oct/11 4:36 PM
          Closed Closed Reopened Reopened
          10d 6h 4m 1 Charles Austin 17/Nov/11 4:34 PM
          Reopened Reopened In Progress In Progress
          188d 13h 48m 1 Alexander Chow 24/May/12 7:23 AM
          In Progress In Progress In Review In Review
          2m 57s 1 Alexander Chow 24/May/12 7:26 AM
          In Review In Review In Review In Review
          21h 3m 1 Julio Camarero 25/May/12 4:30 AM
          In Review In Review Resolved Resolved
          5h 52m 1 Brian Chan 25/May/12 10:22 AM
          Resolved Resolved Closed Closed
          25d 11m 2 Michael Saechang 30/May/12 3:40 PM

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                3 years, 8 weeks, 5 days ago

                Development

                  Structure Helper Panel