Uploaded image for project: 'Moodle app'
  1. Moodle app
  2. MOBILE-1176

Remove SCRIPT tags in content passed to mmFormatText

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Cannot Reproduce
    • Icon: Minor Minor
    • 2.3
    • 2.3
    • Libraries, Security
    • MOODLE_23_STABLE
    • MOODLE_23_STABLE

      As we are compiling mmFormatText content we are also executing the Javascript that was added there. As this can have very random results on the user experience, or even security concerns, my guess is that we should remove, at the very least, the SCRIPT tags.

            Unassigned Unassigned
            fred Frédéric Massart
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:

                Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.