[#JRA-6884] Description TEXTAREA on Edit Issue page doesn't escape HTML properly

JIRA

Description TEXTAREA on Edit Issue page doesn't escape HTML properly

Created: 02/Jun/05 02:45 PM Updated: 30/Jul/06 07:35 PM

Component/s:

Web interface

Affects Version/s:

3.2

Fix Version/s:

3.2.1

Time Tracking:

Not Specified

File Attachments:

description-edit.vm (0.3 kB)
2.

environment-edit.vm (0.3 kB)

Environment:

IE and Safari

Issue Links:

Duplicate

This issue is duplicated by:

~~JRA-7605~~ Cannot edit an issue with HTML in the description

~~JRA-7290~~ HTML not escaped on edit screen

~~JRA-7479~~ Allows cross-site scripting

Participants:	Brian Nguyen [OLD] and Sean Leach
Since last comment:	3 years, 26 weeks, 2 days ago
Resolution Date:	02/Jun/05 08:30 PM
Labels:

Description

« Hide

There is some HTML in the description of one of our issues. On the Edit Issue page, the rest of the page doesn't get rendered properly as the HTML in the description value of the issue isn't escaped properly. This makes it so I cannot edit this particular issue.

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Brian Nguyen [OLD] added a comment - 02/Jun/05 08:30 PM

Thanks for notifying us of this. This will be fixed for 3.2.1

[ Permlink | « Hide ]

Brian Nguyen [OLD] added a comment - 02/Jun/05 08:34 PM

To fix this just replace these 2 files. You will have to restart JIRA fix these changes to take effect.

[ Permlink | « Hide ]

Sean Leach added a comment - 03/Jun/05 08:40 AM

Thanks all! That fixed it.