You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@vcl.apache.org by "Karl Vollmer (JIRA)" <ji...@apache.org> on 2015/01/21 20:16:34 UTC

[jira] [Created] (VCL-808) vcld allows user values that contain HTML which is not cleaned on web interface

Karl Vollmer created VCL-808:
--------------------------------

             Summary: vcld allows user values that contain HTML which is not cleaned on web interface
                 Key: VCL-808
                 URL: https://issues.apache.org/jira/browse/VCL-808
             Project: VCL
          Issue Type: Improvement
          Components: vcld (backend)
    Affects Versions: 2.3.2
            Reporter: Karl Vollmer


put in HTML/Javascript for a users first time, at least it isn't displayed on the web interface, but it makes it into the database.

Example: ./vcld -setup 
Add user with a firstname of "<b>Bol</b>"
Lookup the user on the web interface



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)