LassoSoft Ticket Tracking System
NOTE: If you are using Lasso Server 9.3 please Log your ticket directly via the LUX admin as this will give us more information about your issue.
Ticket #8001: RhinoTrac does not encode html code properly
- Reported by:
- Jolle Carlestam
- 14 Jan, 2016
- Lasso 9
Issue Report from Jolle Carlestam (firstname.lastname@example.org)
Please log in to your LassoSoft account to comment
Component: Lasso 9 Server
Source IP: 220.127.116.11
Adding html as part of the detailed description to a Rhinotrac ticket is not properly encoded when viewed in a browser.
This is a security issue as demonstrated by Bil Corry at the latest LDC.