What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 127 Stack Exchange communities.

The route used to refresh the question after live update notifications doesn't properly encode the question title, which likely provides a limited opportunity for script injection.

In a more practical and less malicious scenario, it also causes the title to be updated incorrectly:

incorrectly updated title

You can see in the source of the route's response to a different question that the unencoded quotation mark prematurely terminates the data-title attribute used to return the title text.

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

Thanks - a fix will be deployed shortly.

share|improve this answer
add comment

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .