{"action":"closed","issue":{"url":"https://api.github.com/repos/OrchardCMS/OrchardTest/issues/208","labels_url":"https://api.github.com/repos/OrchardCMS/OrchardTest/issues/208/labels{/name}","comments_url":"https://api.github.com/repos/OrchardCMS/OrchardTest/issues/208/comments","events_url":"https://api.github.com/repos/OrchardCMS/OrchardTest/issues/208/events","html_url":"https://github.com/OrchardCMS/OrchardTest/issues/208","id":67719232,"number":208,"title":"The script is executed in the client ","user":{"login":"orchardbot","id":11788683,"avatar_url":"https://avatars.githubusercontent.com/u/11788683?v=3","gravatar_id":"","url":"https://api.github.com/users/orchardbot","html_url":"https://github.com/orchardbot","followers_url":"https://api.github.com/users/orchardbot/followers","following_url":"https://api.github.com/users/orchardbot/following{/other_user}","gists_url":"https://api.github.com/users/orchardbot/gists{/gist_id}","starred_url":"https://api.github.com/users/orchardbot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/orchardbot/subscriptions","organizations_url":"https://api.github.com/users/orchardbot/orgs","repos_url":"https://api.github.com/users/orchardbot/repos","events_url":"https://api.github.com/users/orchardbot/events{/privacy}","received_events_url":"https://api.github.com/users/orchardbot/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2010-03-30T20:26:46Z","updated_at":"2015-04-11T01:59:14Z","closed_at":"2015-04-11T01:59:14Z","body":"__vshling__ created:\r\nhttps://orchard.codeplex.com/workitem/16353\r\n\r\nRepro:\n1. Log on the Orchard site as admin account\n2. Add a new page. Input a  title\n3. Check ”show on main menu” and input “<script>alert(“hello world”)</script> “in the menu text box\n4. Select \"Publish Now\" and click \"Save\" button\n5. Go to the main menu to see the page\n\nExpected: The menu text’s content is “<script>alert(“hello world”)</script>”\nResult: The script is executed as the attached snapshot\n"}}