Opened 13 years ago

Closed 13 years ago

#496 closed defect (fixed)

There is no code injection prevention in redline name

Reported by: liuar Owned by: liuar
Priority: P2 Milestone: Future
Component: Widgets Version: 2.0
Severity: Major Keywords:
Cc: Browser: All
External ID: Operating System: All
state: Committed

Description

steps:

  1. Create a redline layer, add it to map and then edit markup
  2. Create a line
  3. Use "</abc" as its name.
  4. Click "Update text"


Expect:
"</abc" is used as label and the name in the redline list should also be it.
Actual:
"</abc" only shows as label in map. In redline list, it's empty.

Change History (1)

comment:1 by liuar, 13 years ago

Resolution: → fixed
state: New → Committed
Status: new → closed

Fixed in changeset [2473]

Note: See TracTickets for help on using tickets.