mirror of
https://github.com/wekan/wekan.git
synced 2025-12-28 05:08:48 +01:00
Logged in users could run javascript in input fields. This affects Wekan versions v3.12-v3.84. In [Wekan v3.12](https://github.com/wekan/wekan/blob/master/CHANGELOG.md#v312-2019-08-09-wekan-release) there was [changes for XSS filter to allow inserting images, videos etc on comment WYSIWYG editor](https://github.com/wekan/wekan/pull/2593) so features related to that are now removed. After this fix, Javascript in input fields is not executed. Thanks to Cyb3rjunky and xet7 ! |
||
|---|---|---|
| .. | ||
| activities | ||
| boards | ||
| cards | ||
| forms | ||
| import | ||
| lists | ||
| main | ||
| mixins | ||
| rules | ||
| settings | ||
| sidebar | ||
| swimlanes | ||
| users | ||