Make WordPress Core

Opened 2 years ago

Last modified 2 years ago

#54655 new defect (bug)

gutenberg can run script when use preview

Reported by: lizhe1985's profile lizhe1985 Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version: 5.8.1
Component: Editor Keywords: reporter-feedback
Focuses: Cc:

Description

  1. add new page or post
  2. add html code : <img src=1 onerror=console.log(123)>
  3. click Preview button
  4. script is fired in brower ; chrome console output 123

can you fix this problem?

Change History (3)

#1 @costdev
2 years ago

Hi @lizhe1985! Welcome to Trac!

As a user with permission to use the HTML block, you've added a HTML block with code that behaves as I would expect it to. Can you clarify what you expect to happen in this situation?

#2 @costdev
2 years ago

  • Component changed from General to Editor

#3 @hellofromTonya
2 years ago

  • Keywords reporter-feedback added
Note: See TracTickets for help on using tickets.