Skip to content

[XSS BUG] The <strong> tag in the block data destroyed the template html structure #20

@ety001

Description

@ety001

Expected behavior

This is the normal page.
normal.gif

Actual behavior

This is the error block I found. ( Block #19734336 )
error.gif

How to reproduce

Open the block #19734336 and you 'll find the html structure has been destroyed.
The reason is that the <strong> tag in the block data destroyed the html structure.

bug.png

This is a potential xss security vulnerability.

I have test it in here. https://steemdb.com/block/19772482.



Posted on Utopian.io - Rewarding Open Source Contributors

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions