commonsense team mailing list archive

[Jason G <jasongross9@xxxxxxxxx>]

*** This bug is a security vulnerability ***

Private security bug reported:

The interface for submitting/displaying statements to OMCS allows
arbitrary markup; any html you type will be rendered directly on the
page displaying your statement.  This may be a security issue.

** Affects: openmind-commons
     Importance: Undecided
         Status: New

-- 
Statement display mechanism allows execution of arbitrary javascript
https://bugs.launchpad.net/bugs/593232
You received this bug notification because you are a member of
Commonsense Computing, which is a direct subscriber.

Status in Open Mind Commons: New

Bug description:
The interface for submitting/displaying statements to OMCS allows arbitrary markup; any html you type will be rendered directly on the page displaying your statement.  This may be a security issue.