validation needed for comments

[vic-georgiev]

From @winterflame on February 17, 2018 19:23

Reported URL

https://connect.topcoder-dev.com/projects/2502

Reproduction Steps

1. login to https://connect.topcoder-dev.com/ using pat_monahan/topcoder123!
2. create a new project (id is 2502)
3. then go to https://connect.topcoder-dev.com/projects/2502
4. enter "<script>alert(100);</script>" as comment title and body , post it, observe

Expected Result

should validate the input properly.

Actual Result

See screenshot, body is empty.

Screenshots

Please check comment section.

Issue Information

Frequency: Always

Device: Mac Pro

OS: Mac OS 10.13.3

Browser: Firefox 58.0.2(64-bit)

Copied from original issue: topcoderinc/connect-test-cycle-1#55

[vic-georgiev]

From @winterflame on February 17, 2018 19:24

[gondzo]

this is not a bug, backend will remove dangerous info from the comments