Skip to content
This repository has been archived by the owner on Dec 6, 2023. It is now read-only.

Xss on Add New Workspace #350

Open
mukeshpilaniya opened this issue Jan 22, 2021 · 1 comment
Open

Xss on Add New Workspace #350

mukeshpilaniya opened this issue Jan 22, 2021 · 1 comment

Comments

@mukeshpilaniya
Copy link

Describe the bug 🐛
while adding a new workspace if a user type "><script>alert(1)</script> in the name field then the XSS is triggered on workspace.

To Reproduce
Steps to reproduce the behavior:

  1. Go to 'https://canvasboard.live/'
  2. Click on 'Add New Workspace'
  3. Type Name as "><script>alert(1)</script>
  4. See error

Screenshots
image

Additional context
https://portswigger.net/web-security/cross-site-scripting

@welcome
Copy link

welcome bot commented Jan 22, 2021

Hello there!👋 Welcome to the project!🚀⚡

Thank you and congrats🎉 for opening your very first issue in this project.Canvasboard is an interactive board with plugins focusing on replacing the need of multiple platforms for teaching, presenting or explaining your ideas. The interactive plugins are built using web technologies to ease your work right within a single platform. Please adhere to our Code of Conduct.🙌 You may submit a PR if you like, make sure to follow our Pull Request Template. If you want to report a bug🐞 please follow our Issue Template. Also make sure you include steps to reproduce it and be patient while we get back to you.😄

Feel free to join our Slack Community.💖 We have different channels for active discussions.✨ Hope you have a great time there!😄

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant