I tested inputting the following line in a comment on a post in the dashboard.
Hello <script> alert("Hi, there!"); </script>
The script got executed. An alert box was shown.
An <input> tag can also be entered.
Is there an option to prevent users from doing this?
Preecha.
Hello <script> alert("Hi, there!"); </script>
The script got executed. An alert box was shown.
An <input> tag can also be entered.
Is there an option to prevent users from doing this?
Preecha.