openlp-core team mailing list archive

[Jonathan Corwin <908197@xxxxxxxxxxxxxxxxxx>]

** Changed in: openlp
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of OpenLP
Core, which is subscribed to OpenLP.
https://bugs.launchpad.net/bugs/908197

Title:
  HTML tags not escaped in alert message

Status in OpenLP - Worship Presentation Software:
  Fix Released

Bug description:
  This means that alert "<Nursery> Please pick up child 123" would lose <Nursery>.
  Also script kiddies could show messages like <style>* {display: none}</style> and would feel good about themselves. Not necessary :)

To manage notifications about this bug go to:
https://bugs.launchpad.net/openlp/+bug/908197/+subscriptions