Support Forum HTML Injection Possible
-
Creating a topic that includes html tags breaks this forum… That seems like a bug that should be fixed. It seems like you aren’t scrubbing text that is typed here or properly escaping it on display.
For example, below I’m going to include a li tag in the brackets and text after that will appear outside it on the page to view the thread…
<li>
This is part of my post but appears outside it with broken formatting.
[moderated to fix formatting]
Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
- The topic ‘Support Forum HTML Injection Possible’ is closed to new replies.