Add new task.
Enter any title.
As description, add : "<script>alert('toto');</script>"
(whitout quotes).
Then go on this task.
Tap button EDIT.
Then the javascript is done. A dialog box with text "toto" appears.
Is it safe ?
Regards.