Make WordPress Core

Opened 4 years ago

Closed 3 weeks ago

#54655 closed defect (bug) (worksforme)

gutenberg can run script when use preview

Reported by: lizhe1985's profile lizhe1985 Owned by:
Milestone: Priority: normal
Severity: normal Version: 5.8.1
Component: Editor Keywords: reporter-feedback close
Focuses: Cc:

Description

  1. add new page or post
  2. add html code : <img src=1 onerror=console.log(123)>
  3. click Preview button
  4. script is fired in brower ; chrome console output 123

can you fix this problem?

Change History (4)

#1 @costdev
4 years ago

Hi @lizhe1985! Welcome to Trac!

As a user with permission to use the HTML block, you've added a HTML block with code that behaves as I would expect it to. Can you clarify what you expect to happen in this situation?

#2 @costdev
4 years ago

  • Component changed from General to Editor

#3 @hellofromTonya
4 years ago

  • Keywords reporter-feedback added

#4 @karmatosed
3 weeks ago

  • Keywords close added
  • Milestone Awaiting Review deleted
  • Resolution set to worksforme
  • Status changed from new to closed

Thank you for reporting this. As some time has passed, and most likely this seems to be due to something on your setup, because this can't be replicated, for now, I am going to close this. However, if we do get more information it can always be repoened or further updates happen.

Note: See TracTickets for help on using tickets.