dhis2-devs team mailing list archive

[Morten Olav Hansen <1549378@xxxxxxxxxxxxxxxxxx>]

Fixed and backported to 2.21, 2.22

** Changed in: dhis2
     Assignee: (unassigned) => Morten Olav Hansen (mortenoh)

** Changed in: dhis2
       Status: New => Confirmed

** Changed in: dhis2
   Importance: Undecided => High

** Changed in: dhis2
    Milestone: None => 2.23

** Changed in: dhis2
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of DHIS 2
developers, which is subscribed to DHIS.
https://bugs.launchpad.net/bugs/1549378

Title:
  Javascript allowed in OU names, v2.22

Status in DHIS:
  Fix Released

Bug description:
  Conducting a training and just had a user pop some javascript into the
  org unit name which when the user revealed it in the org unit
  hierarchy it would fire off the javascript. I tested this in firefox,
  the attached file was the result.

To manage notifications about this bug go to:
https://bugs.launchpad.net/dhis2/+bug/1549378/+subscriptions