Details
-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
16.10.11
-
None
-
Windows 11 Pro, Edge 140, using an instance of XWiki 16.10.11 on MySQL 9.3, Tomcat 9.0.108
-
Unknown
-
Description
Steps to reproduce
- Start an instance of XWiki 16.10.11
- Create a page with the following content:
{{velocity}}{{html}} <script>$jsontool.serialize({ 'closeComment': '-->', 'closeScript': '</script>', 'openComment': '<!--', 'openScript': '<script>' }); '$escapetool.javascript('<!--')'; </script> <h1>Success! 🎉</h1> {{/html}}{{/velocity}}
- Save the page
Expected results
The text "Success! 🎉" is displayed on the page, the XWiki UI is normally displayed.
Actual results
Nothing is displayed on the page. Both Panels and footer is missing as well.
The issue could not be reproduced on XWiki 17.8.0 RC1, one of the Fix Versions of XCOMMONS-3410.
Attachments
Issue Links
- relates to
-
XCOMMONS-3410 $jsontool and $escapetool should escape < to allow safe usage in <script> tags
-
- Closed
-