Demos · Guide · Class Reference · Wiki · Extensions · Live Chat
search

Yii Framework Forum: [SOLVED] Bug - Security issue <script>alert("hello world");</script> - Yii Framework Forum

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

[SOLVED] Bug - Security issue <script>alert("hello world");</script> Rate Topic: -----

#1 User is offline   hoplayann 

  • Newbie
  • Yii
  • Group: Members
  • Posts: 9
  • Joined: 31-October 11

Posted 31 October 2011 - 07:18 AM

Hello,

After doing a research for "CHtmlPurifier" in the forum I had a javascript alert "1".
It seems that the title of one of the posts listed as search results contains some javascript.

So I am now trying to reproducing it in this post, so that developers can fix it later.

This is the page I am talking about : http://www.yiiframew...ier&lang=&type=
(you might have to re-click the search button)
2

#2 User is offline   Ben 

  • Standard Member
  • PipPip
  • Yii
  • Group: Members
  • Posts: 254
  • Joined: 15-March 09

Posted 31 October 2011 - 10:14 AM

It's the one pointing to this thread: Active Record and [script]alert(1)[/script] problem
Don't like ads in my sig...
0

#3 User is online   samdark 

  • Having fun
  • Yii
  • Group: Yii Dev Team
  • Posts: 2,651
  • Joined: 17-January 09
  • Location:Russia

Posted 31 October 2011 - 03:03 PM

Thanks, will check it.
Yii 1.1 Application Development Cookbook
0

#4 User is offline   hoplayann 

  • Newbie
  • Yii
  • Group: Members
  • Posts: 9
  • Joined: 31-October 11

Posted 02 November 2011 - 09:56 AM

cheers,
0

#5 User is online   samdark 

  • Having fun
  • Yii
  • Group: Yii Dev Team
  • Posts: 2,651
  • Joined: 17-January 09
  • Location:Russia

Posted 02 November 2011 - 05:10 PM

Fixed. Will be deployed soon.
Yii 1.1 Application Development Cookbook
0

#6 User is offline   hoplayann 

  • Newbie
  • Yii
  • Group: Members
  • Posts: 9
  • Joined: 31-October 11

Posted 27 February 2012 - 05:22 AM

is that one solved now ?
0

#7 User is online   samdark 

  • Having fun
  • Yii
  • Group: Yii Dev Team
  • Posts: 2,651
  • Joined: 17-January 09
  • Location:Russia

Posted 27 February 2012 - 08:04 AM

Yes, should be so. If not, let me know.
Yii 1.1 Application Development Cookbook
0

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users