Not a bug Javascript error when creating a thread with this code (freeze)

[account8226]

Hello,

I tried the following when editing a thread in popup mode :

javascript:alert('Error')
<script>alert('Error')</script>
/?title=<script>alert('Error')</script>

But when we click 'Save changes' it's freezing (I think it's making a JS error).


I'll update if I find the exact manipulation to reproduce.

 

[Paul B]

Can you reproduce that here or does it just happen on your own site?

Try disabling any add-ons and removing any additional JavaScript and trying again.

 

[account8226]

Can you reproduce that here or does it just happen on your own site?

Try disabling any add-ons and removing any additional JavaScript and trying again.

Ok, I tried again and and I think it's because of CloudFlare Still a bug, but not really because of XenForo CloudFlare think it's an attack and forbid access to /posts/ID/save-inline.