[jira] [Commented] (SYNCOPE-1549) Groups select opens a popup when removing a group

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SYNCOPE-1549?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17183257#comment-17183257 ] 

ASF subversion and git services commented on SYNCOPE-1549:
----------------------------------------------------------

Commit feacc1a2b3e31b13bf53be0d6886a36cd6e762bd in syncope's branch refs/heads/2_1_X from Andrea Patricelli
[ https://gitbox.apache.org/repos/asf?p=syncope.git;h=feacc1a ]

[SYNCOPE-1549] whitelisted javascript in href attributes


> Groups select opens a popup when removing a group
> -------------------------------------------------
>
>                 Key: SYNCOPE-1549
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-1549
>             Project: Syncope
>          Issue Type: Bug
>          Components: enduser
>    Affects Versions: 2.0.14, 2.1.5
>         Environment: Google Chrome 80.0.3987.132
> Mozilla Firefox 74.0
>            Reporter: Andrea Patricelli
>            Priority: Major
>             Fix For: 2.0.16, 2.1.7
>
>
> # Open enduser login page and click on "Registration"
>  # Go to the Groups step and add a group
>  # Remove the group just added and you'll notice on Chrome a popup and on FIrefox an error page showing undefined JavaScript execution.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)