"><svg/onload=alert(1)> TEST #1797

New Issue

Closed

opened 2021-06-10 22:14:05 +00:00 by bbh · 6 comments

bbh commented

2021-06-10 22:14:05 +00:00

"><svg/onload=alert(1)> TEST

"><svg/onload=alert(1)> TEST ![gg](javascript:alert(1))

bbh commented

2021-06-10 22:14:13 +00:00

Author

"><svg/onload=alert(1)> TEST

"><svg/onload=alert(1)> TEST

konrad closed this issue

2021-06-10 22:15:28 +00:00

bbh commented

2021-06-10 22:45:17 +00:00

Author

sorry guys , just for testing i will send a full report about this

sorry again

sorry guys , just for testing i will send a full report about this sorry again

konrad commented

2021-06-10 22:55:13 +00:00

Owner

Well looks like that comment had a lasting impact:

Well looks like that comment had a lasting impact: ![image](/attachments/3a23428a-9f77-4229-82c0-9f7089c55f0e)

32 KiB

konrad commented

2021-06-10 22:56:19 +00:00

Owner

That comment I removed was really interesting:

I wasn't even able to load the issue.

That comment I removed was really interesting: ![image](/attachments/f272d9f1-abeb-40ab-80e3-82786b665385) I wasn't even able to load the issue.

56 KiB

bbh commented

2021-06-10 23:20:08 +00:00

Author

yeah , it's alot of emojis and diffrent unicode like (ĵ,Ê,ᴶ)

like this report : https://hackerone.com/reports/511381

if kolaente have email for security or bug bounties please text me back, for reporting all security issues i've found on kolaente

thanks 😄

yeah , it's alot of emojis and diffrent unicode like (ĵ,Ê,ᴶ) like this report : https://hackerone.com/reports/511381 if kolaente have email for security or bug bounties please text me back, for reporting all security issues i've found on kolaente thanks 😄

konrad commented

2021-06-10 23:34:36 +00:00

Owner

If you have Vikunja-related security issues, please write that to the security email.

If you have Gitea-related security issues (that's this git server) please use their procedures to disclose these issues.

If you have Vikunja-related security issues, please write that to [the security email](https://vikunja.io/contact/#security). If you have Gitea-related security issues (that's this git server) please use [their procedures](https://github.com/go-gitea/gitea/blob/main/SECURITY.md) to disclose these issues.

konrad referenced this issue from a commit

2024-02-07 14:00:33 +00:00

feat: remove copy-to-clipboard (#1797)

Sign in to join this conversation.

No Label

needs reproduction

No Milestone

No Assignees

2 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: vikunja/vikunja#1797

No description provided.