[wp-trac] [WordPress Trac] #19014: Titles containing JavaScript execute the JavaScript - XSS risk

[WordPress Trac]

#19014: Titles containing JavaScript execute the JavaScript - XSS risk
--------------------------+------------------------------
 Reporter:  dbvista       |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:  3.2.1
 Severity:  major         |  Resolution:
 Keywords:                |
--------------------------+------------------------------

Comment (by rianjs):

 Working example:

 Direct link to post:
 http://rianjs.net/2011/10/alertfoo

 Homepage with the post on it:
 http://rianjs.net

 Both trigger the JS.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/19014#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software