https://bugs.kde.org/show_bug.cgi?id=423020
Bug ID: 423020
Summary: Using wifi SSID with xss vectors result in wifi not
rendering
Product: kde
Version: unspecified
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: unassigned-b...@kde.org
Reporter: advaith.madhu...@gmail.com
Target Milestone: ---
SUMMARY
Using wifi name with xss vectors result in wifi not rendering
STEPS TO REPRODUCE
1. set wifi SSID to something like <svg/onload=alert('XSS')>
2. open the connect menu in panel.
OBSERVED RESULT
SSID will not be displayed.
EXPECTED RESULT
SSID will be displayed/
SOFTWARE/OS VERSIONS
Linux/KDE Plasma: openSUSE tumbleweed/Arch linux
KDE Plasma Version: 5.19
KDE Frameworks Version: 5.79.0
Qt Version: 5.15
ADDITIONAL INFORMATION
his is similar to XSS attacks in web-browsers where the dom parser misses XSS
vectors. the issue was not present in the previous version of plasma.
--
You are receiving this mail because:
You are watching all bug changes.
