[buddypress-trac] [BuddyPress] #1017: wire not filtering input properly

buddypress-trac at lists.automattic.com buddypress-trac at lists.automattic.com
Wed Sep 16 15:35:02 UTC 2009


#1017: wire not filtering input properly
-----------------------------------------+----------------------------------
Reporter:  DJPaul                        |       Owner:     
    Type:  defect                        |      Status:  new
Priority:  major                         |   Milestone:  1.1
Keywords:  wire, post, href, javascript  |  
-----------------------------------------+----------------------------------

Comment(by djpaul):

 This is an important issue because I could craft a link to potentially
 execute a harmful JavaScript action (if an admin clicks on it).

-- 
Ticket URL: <https://trac.buddypress.org/ticket/1017#comment:2>
BuddyPress <http://buddypress.org/>
BuddyPress


More information about the buddypress-trac mailing list