Skip to content
Snippets Groups Projects
Commit 60c98fb9 authored by gnaegi's avatar gnaegi
Browse files

OO-885 removed xss check as not necessary within textarea and has unwanted side effects

parent fb44d46d
No related branches found
No related tags found
No related merge requests found
...@@ -276,8 +276,6 @@ public class AssessmentForm extends FormBasicController { ...@@ -276,8 +276,6 @@ public class AssessmentForm extends FormBasicController {
userCommentValue = assessableCourseNode.getUserUserComment(userCourseEnv); userCommentValue = assessableCourseNode.getUserUserComment(userCourseEnv);
if (userCommentValue == null) { if (userCommentValue == null) {
userCommentValue = ""; userCommentValue = "";
} else {
userCommentValue = StringHelper.xssScan(userCommentValue);
} }
userComment = uifactory.addTextAreaElement("usercomment", "form.usercomment", 2500, 5, 40, true, userCommentValue, formLayout); userComment = uifactory.addTextAreaElement("usercomment", "form.usercomment", 2500, 5, 40, true, userCommentValue, formLayout);
} }
...@@ -285,8 +283,6 @@ public class AssessmentForm extends FormBasicController { ...@@ -285,8 +283,6 @@ public class AssessmentForm extends FormBasicController {
coachCommentValue = assessableCourseNode.getUserCoachComment(userCourseEnv); coachCommentValue = assessableCourseNode.getUserCoachComment(userCourseEnv);
if (coachCommentValue == null) { if (coachCommentValue == null) {
coachCommentValue = ""; coachCommentValue = "";
} else {
coachCommentValue = StringHelper.xssScan(coachCommentValue);
} }
coachComment = uifactory.addTextAreaElement("coachcomment", "form.coachcomment", 2500, 5, 40, true, coachCommentValue, formLayout); coachComment = uifactory.addTextAreaElement("coachcomment", "form.coachcomment", 2500, 5, 40, true, coachCommentValue, formLayout);
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment