Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

XSS for internal search queries #11

Closed
gpsietzema opened this issue Mar 8, 2017 · 0 comments
Closed

XSS for internal search queries #11

gpsietzema opened this issue Mar 8, 2017 · 0 comments
Assignees
@gpsietzema
Labels
bug
Milestone
1.0.6

Comments

@gpsietzema
Copy link
Contributor

It is possible to execute in-manager javascript when tracking internal site-search with Google Analytics. The javascript you search for will be saved by Google Analaytics. Which in turn will be read-out by the Dashboard Widget. Executing javascript would be possible here.
screen shot 2017-03-08 at 15 17 32
@gpsietzema gpsietzema added this to the 1.0.6 milestone Mar 8, 2017
@gpsietzema gpsietzema added the bug label Mar 8, 2017
@gpsietzema gpsietzema self-assigned this Mar 8, 2017
gpsietzema added a commit that referenced this issue Mar 9, 2017
@gpsietzema
Merge pull request #12 from gpsietzema/development
855d956 
Fixed XSS vulnerability #11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@gpsietzema gpsietzema

Labels
bug
Projects
None yet
Milestone
1.0.6
Development

No branches or pull requests
1 participant
@gpsietzema