[dolphin] [Bug 480190] New: Dolphin HTML injection

Benjamin Flesch bugzilla_noreply at kde.org
Mon Jan 22 21:36:49 GMT 2024


https://bugs.kde.org/show_bug.cgi?id=480190

            Bug ID: 480190
           Summary: Dolphin HTML injection
    Classification: Applications
           Product: dolphin
           Version: unspecified
          Platform: Other
                OS: Linux
            Status: REPORTED
          Severity: normal
          Priority: NOR
         Component: view-engine: general
          Assignee: dolphin-bugs-null at kde.org
          Reporter: benjaminflesch at icloud.com
                CC: kfm-devel at kde.org
  Target Milestone: ---

SUMMARY
***
HTML can be injected into Dolphin UI from the command line. 
***


STEPS TO REPRODUCE
1. Open terminal
2. type: dolphin "<h1>HTML Injection</h1>"
3. press enter, dolphin will inject the HTML

OBSERVED RESULT
HTML injected

EXPECTED RESULT
no html injected

SOFTWARE/OS VERSIONS
dolphin 23.08.4

ADDITIONAL INFORMATION

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the kfm-devel mailing list