Create passport with name `<script>alert('Injected script')</script>`

Related to : #28 (closed) 2. Create passport with name <script>alert('Injected script')</script>

Go to https://kolab.vereign.com

Click on Passport selectbox

Result: The injected script will be executed and browser will display alert popup with message Injected script

changed the description

changed title from As a hacker, I can create email message with any content I want without sending it from gmail or roundcube. I can add any recipients and any email message via conversationAddEmail to {+Create passport with name <script>alert('Injected script')</script>+}

changed the description

changed milestone to %v0.18

changed milestone to %v0.17

assigned to @alexey.lunin

removed milestone

unassigned @alexey.lunin