summary: Fix injection problem when using "double quotes" in ticket summary --> Fix injection problem when using "double quotes><script>alert('hi')</script>" in ticket summary
summary: Fix injection problem when using "double quotes><script>alert('hi')</script>" in ticket summary --> Fix injection problem when using "><script>alert('hi')</script>double quotes" in ticket summary
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
summary: Fix injection problem when using "double quotes" in ticket summary --> Fix injection problem when using "double quotes><script>alert('hi')</script>" in ticket summary
summary: Fix injection problem when using "double quotes><script>alert('hi')</script>" in ticket summary --> Fix injection problem when using "><script>alert('hi')</script>double quotes" in ticket summary
So it doesn't look like this is a JS injection issue, but rather a problem that we're not properly escaping quote when creating the <input> field.