 |
History
| Log In
|
|
|
|
The attack from administration is less likely.
The main problem is catering for the user only side of things. the attack is more likely from a user wanting administrator privs... Issue clarified, can now be closed.
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 |
|
Bug
Closed
Priority One: Required
Cross site scripting checks
1. create a user/and group using <script type="text/javascript">window.alert("Hello World!")</script>
2. Search for user/group using <script type="text/javascript">window.alert("Hello World!")</script>
3. Creating unit trancates script to <script type=