-
Bug
-
Resolution: Fixed
-
Neutral
-
4.4.5
-
None
There are some corner cases where an error message (as set by AlertUtil) is displayed without being escaped - the integration tests "forging" an activation request are an example of such.
Steps to reproduce:
- misconfigure subscribers
- point your browser to http://localhost:8080/magnoliaAuthor/.magnolia/trees/website.html?path=/&treeAction=2&pathSelected=%2F
- if subscribers are wrongly configured, you should get a "Can't activate" alert box. Instead, you can see a js error in the console, because the apostrophe hasn't been escaped.
Acceptance criteria