Forms is crashing when trying to save an empty form (with no fields) by the first time with </script> tag in the title

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.0.X, 7.1.X, 7.2.X, Master
• Fix Version/s: 7.3.0 CE GA1, Master
• Component/s: Forms
• Labels:
  • 7.2-could
  • QA-V
  • liferay-beta3-ce-720
  • pt-app-security-review
• Fix Priority: 3
• Sprint: Forms_7.3_16
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/83577

Summary:
Forms is crashing when trying to save an empty form (with no fields) by the first time with </script> tag in the title.

Steps to reproduce:

1. Go to Content > Forms;
2. Click to add a New Form;
3. Type the following content in the title: "<script> my title </script>";
4. Try to save the form.

Expected result:
The form should not be saved and a message should be shown informing to the user to add at least one field in order to save the form.

Actual result:
Forms is crashing when trying to save an empty form (with no fields) by the first time with </script> tag in the title.

Notes:

1. After adding a field, or if the user add a field before saving the form containing the </script> tag in the title, it is properly saved.
2. If the user tries to save the Form with others tags in the title, the form is properly saved.

Reproducible In:

master: cb86f281f9df4768a47fa0d489c18e9f2085d573
Updated on: Tue Apr 23 22:52:56 2019 -0700

7.2.x
Commit: 1c36a57c64cae694f871a33acb571fbb97799e1a
Base Branch Commit: 3ad9ee1a8265f761e6126361fbe65ce2689b9b0e
Updated on: Wed Apr 24 15:47:20 2019 -0700