Skip to content

Commit

Permalink
Register assets
Browse files Browse the repository at this point in the history
How to reproduce:

disable the Limesurvey XSS filter at
Global settings -> Security -> “Filter HTML for XSS” = “No”.

Create a "Short Free Text" question.

Add a script to the question. Example: `console.log (" I'm here ")`

Preview the issue.

Check to see if you’re here in the developer tools console of your browser.

The correction:
The method needs to be refactored but the change resolves the bug.
  • Loading branch information
vitormattos committed Jan 6, 2021
1 parent 7121a02 commit 7f65126
Showing 1 changed file with 1 addition and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,7 @@ public function getRows()
public function render($sCoreClasses = '')
{
$result = @do_shortfreetext($this->aFieldArray);
$this->registerAssets();
return $result;

$answer = '';
Expand Down

0 comments on commit 7f65126

Please sign in to comment.