Loading...
 
Skip to main content

XSS/JS filter hitting when saving a custom Smart template file

Status
Pending
Subject
XSS/JS filter hitting when saving a custom Smart template file
Version
2.x
Category
  • Error
Feature
Templates (Smarty)
Resolution status
New
Submitted by
Carsten Schmitz
Lastmod by
Carsten Schmitz
Rating
(0)
Description

When saving a Smarty template for a specific theme using the TikiWiki admin GUI then all kinds of fake tags </x> are inserted in javascript.
It seems that the XSS filter is hitting here. It should not since it is a super-admin function and should not be XSS-filtered, of course.

I tried to edit tiki-editpage.tpl when this occured.

Importance
4
Priority
20
Demonstrate Bug on Tiki 19+
Please demonstrate your bug on show2.tiki.org
Demonstrate Bug (older Tiki versions)
Ticket ID
1992
Created
Thursday 28 August, 2008 09:23:56 UTC
by Unknown
LastModif
Thursday 28 August, 2008 09:23:56 UTC


Collapse/expand modules below
Show PHP error messages