Details
-
Bug
-
Resolution: Fixed
-
Major
-
16.10.0
-
None
-
Unit
-
Unknown
-
N/A
-
N/A
-
Description
Steps to reproduce:
Create a page with the content
{{velocity}}{{html}}
<script>$jsontool.serialize({
'closeComment': '-->',
'closeScript': '</script>',
'openComment': '<!--',
'openScript': '<script>'
});
'$escapetool.javascript('<!--')';
</script>
<h1>Success! ๐</h1>
{{/html}}{{/velocity}}
Expected result:
The text "Success! ๐" is displayed on the page, the XWiki UI is displayed regularly.
Actual result:
The text isn't displayed.ย The panels and the footer of the wiki are missing.
Attachments
Issue Links
- is related to
-
XCOMMONS-3424 $jsontool and $escapetool does not escape < to allow safe usage in <script> tags on XWiki 16.10.11
-
- Closed
-