Steps to reproduce:
- As a user without script right, save a page with a code macro with a script reference like
- As a user with script macro, try editing the page.
Expected result: There is a warning regarding the script right that will be granted to the code macro. Actual result: There isn't any warning. I don't see how this could have a security impact as the code macro doesn't execute the displayed content and there shouldn't be any variables in the script context that contain sensitive data. |