XSS in concurrent edit notification

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Medium
    • 3.0-rc1
    • Affects Version/s: 3.0-beta3
    • Component/s: None

      If a page is being editted by

      <script>alert('hacked')</script>
      

      and another user edits it at the same time, they are vulnerable to a potential XSS attack.

              Assignee:
              CharlesA
              Reporter:
              Andrew Lynch (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: