search

archimag / cliki2

25 stars 13 forks source link

User can save pure js-code in Edit summary field #6

Closed alder closed 12 years ago

alder commented 12 years ago

Steps to reproduce:

  1. Edit some article and fill Edit summary with: < script >alert(1);< /script >
  2. Save article.
  3. Go to Recent changes page.

You can see popup window with text "1". Browser: Firefox 8.0

vsedach commented 12 years ago

Fixed. Thanks for the bug report!