Writing JS into the PG description is rejected

[Anonymous]

Hi all

When I write to JS tag sample into my program description,

this error message is shown. I have admin privileges.

On the other hand, I can write HTML sample into it.

JS injection?

[SanfordWhiteman]

Probably XSS protection kicking in. The error is from the server after scanning the input. The textbox doesn't render HTML anyway, so not sure what you're trying to get out of it....

[Anonymous]

Hi Sanford Whiteman​

I found a workaround to XSS protection.

Change '<' to other char.

[SanfordWhiteman]

Makes sense.