[SECURITY] XSS in form creation wizard
The form name is rendered multiple times in the form wizard when either creating or cloning a form. Any input is now sanitized to avoid XSS in the summary step of the form wizard. Resolves: #93560 Releases: master, 11.1, 10.4 Change-Id: I3ddce48e38e32456318c695774bbcd035115b5ae Security-Bulletin: TYPO3-CORE-SA-2021-004 Security-References: CVE-2021-21358 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/68437 Tested-by:Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org>
Please register or sign in to comment