Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Done
-
R3.4.3
-
XRAY 2020 Sprint 10
-
Description
In the Automated Steps Library page, in case of a syntax error, it is possible to execute JS text.
Steps to Reproduce:
1) Create a new Cucumber Test
2) Add a new Step: When I do stuff
3) Go to the Automated Steps Library
4) Edit the step created in 2) and replace with the following text:
When I do stuff <script>alert(1);</script>
5) Click "Save"
Result: a popup will be displayed will appear
Expected: the HTML tags should not be processed