Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-9903

Execute javascript in [flash=] BBCode

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 3.0.7-PL1, 3.0.8-RC1
    • Fix Version/s: 3.0.8
    • Component/s: Posting
    • Labels:
      None

      Description

      You can execute javascript by posting it into the flash-bbcode.
      Example: 

      [flash=1,1]javascript:alert(/Guess what?/);[/flash]

      For more details see: 

      https://forum.antichat.ru/showpost.php?p=1775767

        Attachments

          Activity

            People

            • Assignee:
              naderman Nils Adermann
              Reporter:
              nickvergessen Joas Schilling [X] (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: