{"action":"opened","issue":{"url":"https://api.github.com/repos/samuelmolinski/issueTests/issues/8","repository_url":"https://api.github.com/repos/samuelmolinski/issueTests","labels_url":"https://api.github.com/repos/samuelmolinski/issueTests/issues/8/labels{/name}","comments_url":"https://api.github.com/repos/samuelmolinski/issueTests/issues/8/comments","events_url":"https://api.github.com/repos/samuelmolinski/issueTests/issues/8/events","html_url":"https://github.com/samuelmolinski/issueTests/issues/8","id":195551869,"number":8,"title":"Able to bypass character limit on Questions dialog message box through HTML tweak","user":{"login":"samuelmolinski","id":809937,"avatar_url":"https://avatars.githubusercontent.com/u/809937?v=3","gravatar_id":"","url":"https://api.github.com/users/samuelmolinski","html_url":"https://github.com/samuelmolinski","followers_url":"https://api.github.com/users/samuelmolinski/followers","following_url":"https://api.github.com/users/samuelmolinski/following{/other_user}","gists_url":"https://api.github.com/users/samuelmolinski/gists{/gist_id}","starred_url":"https://api.github.com/users/samuelmolinski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/samuelmolinski/subscriptions","organizations_url":"https://api.github.com/users/samuelmolinski/orgs","repos_url":"https://api.github.com/users/samuelmolinski/repos","events_url":"https://api.github.com/users/samuelmolinski/events{/privacy}","received_events_url":"https://api.github.com/users/samuelmolinski/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-12-14T14:55:10Z","updated_at":"2016-12-14T14:55:10Z","closed_at":null,"body":"Through HTML modification, I can submit more than 800 characters in the message field. \r\nSteps to reproduce:\r\n1. Inspect the text box element, this is the relevant line:\r\n<textarea maxlength=\"800\" required=\"required\" aria-describedby=\"edit-body-description\" id=\"edit-body\" name=\"body\" cols=\"80\" rows=\"9\" class=\"form-textarea required\"></textarea>\r\n2. Change the maxlength to whatever you want, 50,000 for example\r\n3. Input a large amount of text, I was able to submit 15,000 characters. Click 'Submit.'\r\n\r\n\r\n*Technical Strategy*\r\n* Validate form values when user submits - truncate to first 800 characters\r\n* Sanitize textarea also to remove scripting\r\n* Files:  sites/all/modules/custom/features/suggestion_box/js/src/suggestion_box_modal.js\r\n* $form.submit(function(){ - Add truncation / limit to this function"}}
{"actor":{"display_login":"samuelmolinski"}}