View Issue Details

IDProjectCategoryView StatusLast Update
0000017TeamSpeak Channel Management System[All Projects] Generalpublic2017-05-14 13:10
ReporterkyleAssigned Tokyle 
PrioritylowSeveritytrivialReproducibilitysometimes
Status closedResolutionwon't fix 
Product VersionRelease 
Target VersionReleaseFixed in Version 
Summary0000017: XSS Channel Description - Shows no error
DescriptionWhen attempting to do XSS using Channel Description, it just says Submitting, please wait...
Steps To Reproduce1. Select Channel
2. Edit Channel
3. Click Description
4. Enter <script>alert('test');</script>
5. Submit
Additional InformationThis is probably due to the converter detecting a possible XSS and showing an error which isn't being handled. As the XSS never gets submitted this is trivial and not a high risk.

Use htmlentities to resolve this?
TagsNo tags attached.
BrowserAll

Activities

kyle

2017-05-14 13:10

administrator   ~0000042

XSS protection is coded in the editor. I don't feel like searching through multiple files trying to find out where it is.

Issue History

Date Modified Username Field Change
2016-08-01 17:06 kyle New Issue
2016-08-01 17:06 kyle Status new => assigned
2016-08-01 17:06 kyle Assigned To => kyle
2016-08-01 17:06 kyle Status assigned => confirmed
2016-08-19 03:18 kyle Status confirmed => acknowledged
2016-08-19 03:22 kyle Priority normal => low
2017-05-14 13:10 kyle Status acknowledged => closed
2017-05-14 13:10 kyle Resolution open => won't fix
2017-05-14 13:10 kyle Note Added: 0000042