Closed
Bug 677781
Opened 15 years ago
Closed 15 years ago
Utest Bug ID: 200478 - Mozilla: Input XSS attack ,the result is a '#'
Categories
(Websites :: webifyme.org, defect)
Tracking
(Not tracked)
RESOLVED
INVALID
People
(Reporter: webqa.utest, Unassigned)
Details
Attachments
(1 file)
|
139.67 KB,
image/pjpeg
|
Details |
XSS
IE 9.0.8112.16421
Chrome 12.0.742.122
Location: Canada
Steps:
1.Open https://webifyme-dev.allizom.org/en-US/
2.Click MOZILLA on the bottom
3.Input "<script>alert("test")</script>" in serach field
4.Click search
Expected:
It should link to google search page and show the results
Actual:
The result is a '#'
|
Reporter | |
Updated•15 years ago
|
Status: NEW → UNCONFIRMED
Ever confirmed: false
|
||
Updated•15 years ago
|
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago
Resolution: --- → INVALID
You need to log in
before you can comment on or make changes to this bug.
Description
•