Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Done
-
R3.2.0
-
Xray R3.2.0 S4
-
Description
Test and Pre-condition email is subject to HTML injection.
If you write a Cucumber scenario with an HTML tag (e.g. <button>) this text will be rendered to HTML in the e-mail.
Given I have entered <input_1> into the calculator And I have entered <input_2> into the calculator When I press <button> Then the result should be <output> on the screen stuff Examples: | input_1 | input_2 | button | output | | 20 | 30 | add | 50 | | 2 | 5 | add | 7 | | 0 | 40 | add | 40 | | 4 | 50 | add | 54 | | 5 | 50 | add | 55 |