- 
    
Defect (Security)
 - 
    Resolution: Fixed
 - 
    
Major
 - 
    4.0.0alpha1, 4.0.0alpha2, 4.0.0alpha3
 
- 
        Sprint 28, Sprint 29, Sprint 30, Sprint 31
 - 
        0.125
 
There is a persistent xss in map navigation tree widget. To reproduce it, create a map navigation tree widget, add single element and set it's name to <img src="xxx" onerror="alert('xss');"/>. As a result you will get:
