Description
Steps to reproduce
- Install Magento 2.0.2 or 2.0.4
- Add a Content Page
- Add values to all necessary required fields in order to save the page with the exception of the content
- Using the WYSIWYG editor, copy and past this following text into the box.
11. SUBMISSIONS. If Customer or any user sends, transmits, posts, e-mails or otherwise conveys to Tyndale, whether at our request or not, any information, software, photos, video, text, graphics, music, sounds, questions, creative suggestions, messages, comments, feedback, ideas, notes, drawings, articles, stories about Customer or its users, or other materials of any kind whatsoever (collectively, the "Submissions"), those Submissions will be deemed, and will remain, the property of Tyndale. Subject to the Tyndale Privacy Policy [INCLUDE LINK], none of the Submissions will be subject to any obligation of confidentiality on our part, nor will we be liable for the use or disclosure of any Submissions. Without limitation of the foregoing, Customer grants to Tyndale and its successors and assigns a royalty-free, perpetual, irrevocable, non-exclusive right (including any moral rights) and license (as well as consent) to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, communicate to the public, perform, display and sublicense any Submissions (in whole or in part and with or without the use of Customer's name in conjunction therewith) anywhere in the world. Customer also grants to Tyndale and its successors and assigns the right to incorporate Submissions into other works in any form, medium or technology now known or later developed, for the full term of any copyrights, trademarks and other intellectual and proprietary rights (collectively, "Rights") that may exist in such Submissions. Customer also warrants to Tyndale that any third party holder of any Rights has validly and irrevocably granted to Customer the right to grant the rights and licenses set forth above. Customer further acknowledges that Tyndale and its successors and assigns will be entitled to unrestricted use of the Submissions for any purpose whatsoever, commercial or otherwise.
- Save the Page
Expected result
- The page saves
Actual result
- The page throws a 403 with the following message:
Forbidden
You don't have permission to access /admin_1a1ryf/cms/page/save/key/7d65daced65de45e0bacdaaa9434b9f4e3670e1d5902ab107abc180a514b8e29/active_tab/content_section/ on this server.
