openlp-core team mailing list archive

[mahfiaz <mahfiaz@xxxxxxxxx>]

Public bug reported:

This means that alert "<Nursery> Please pick up child 123" would lose <Nursery>.
Also script kiddies could show messages like <style>* {display: none}</style> and would feel good about themselves. Not necessary :)

** Affects: openlp
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of OpenLP
Core, which is subscribed to OpenLP.
https://bugs.launchpad.net/bugs/908197

Title:
  HTML tags not escaped in alert message

Status in OpenLP - Worship Presentation Software:
  New

Bug description:
  This means that alert "<Nursery> Please pick up child 123" would lose <Nursery>.
  Also script kiddies could show messages like <style>* {display: none}</style> and would feel good about themselves. Not necessary :)

To manage notifications about this bug go to:
https://bugs.launchpad.net/openlp/+bug/908197/+subscriptions