Uploaded image for project: 'Moodle Community Sites'
  1. Moodle Community Sites
  2. MDLSITE-2369

local/chatlogs should only display plaintext

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Low Low
    • moodle.org
    • None

      HTML is not escaped, as you can see here:

      https://moodle.org/local/chatlogs/index.php?conversationid=13404#c452233

      That was:

      <h1>Test</h1>

        1. xssvulnfix.patch
          0.7 kB

            poltawski Dan Poltawski
            fred Frédéric Massart
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved:

                Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.