Opened 3 years ago
Last modified 3 years ago
#54655 new defect (bug)
gutenberg can run script when use preview
| Reported by: |
|
Owned by: | |
|---|---|---|---|
| Milestone: | Awaiting Review | Priority: | normal |
| Severity: | normal | Version: | 5.8.1 |
| Component: | Editor | Keywords: | reporter-feedback |
| Focuses: | Cc: |
Description
- add new page or post
- add html code ： <img src=1 onerror=console.log(123)>
- click Preview button
- script is fired in brower ; chrome console output 123
can you fix this problem?
Change History (3)
Note: See
TracTickets for help on using
tickets.
Hi @lizhe1985! Welcome to Trac!
As a user with permission to use the HTML block, you've added a HTML block with code that behaves as I would expect it to. Can you clarify what you expect to happen in this situation?