Clone this issue
|
|
If you were logged in you would be able to see more operations.
|
|
|
Original Estimate:
|
Unknown
|
Remaining Estimate:
|
Unknown
|
Time Spent:
|
Unknown
|
|
Environment:
|
Cerb4 4.2 thru 4.3.1
|
|
| Value: |
3 - Would Be Nice
|
| Marquee: |
Platform
|
Entering html code into a workspace name field on creation is not seen as an error. This code is taken and returned as the workspace name. Seems to be escaped in that instance.
If the entered html tag is not closed or valid, one is unable to edit the workspace name as the output to the edit dialogue is not escaped.
Please escape all html code in display at least, or better validate all input and reject any html.
|
|
|
|
Bug
Resolved
Input validation not done