[MDL-55888] Non-trusted text can be saved in category description but disappears when edited - Moodle Tracker

XML

Word

Printable

Affected Branches:
MOODLE_30_STABLE, MOODLE_31_STABLE
Difficulty:
Easy
Testing Instructions:
Hide

Create a new category

As a trusted user input <script type="text/javascript">alert('test');</script> into the description

Ensure the code was saved - visit category page and you should see the alert

Edit the description and check if the script is displayed still
Show
Create a new category As a trusted user input <script type="text/javascript">alert('test');</script> into the description Ensure the code was saved - visit category page and you should see the alert Edit the description and check if the script is displayed still

The category description allows non-save text to be input like javascript but it disappears when trying to edit it.

Component watchers:: Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Laurent David, Raquel Ortega, Sara Arjona (@sarjona)