Other: It look like the server will alway return Error (500) for user who enter javascript as his name

Question

Other: It look like the server will alway return Error (500) for user who enter javascript as his name

Closed this issue 4 years ago · 3 comments

I try to enter my username with javascript, and then every single page (when I still log in), returns Server Error (500).
It works normally when I didn't login thoungh.

URL: https://jix.herokuapp.com/

Answer 1 · 2020-12-04T07:52:54.000Z

I don't understand you.

Answer 2 · 2020-12-04T08:08:49.000Z

Then just try it yourself.

go to your profile, edit it.
enter username with
<script> alert("Hello! I am an alert box!"); </script>
then click Update.

Answer 3 · 2020-12-04T08:10:26.000Z

Ok, I will try, but before opening issue next time please be more specific and add a way to reproduce.