Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-20583

Provide a macro for sanitizing URLs in templates

    XMLWordPrintable

Details

    • Integration
    • Unknown

    Description

      Now that we provided script services for sanitizing html elements and for checking URLs, I'd like to provide a dedicated velocity macro for helping ensuring the URLs are safe in templates.

      Attachments

        Issue Links

          blocks

          Security - Security bug with confidential level XWIKI-20341 RXSS in Delete Template via redirect parameter

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Security - Security bug with confidential level XWIKI-20352 RXSS via xredirect parameter in restore template

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Security - Security bug with confidential level XWIKI-20612 RXSS via xredirect parameter in deletespace template

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Security - Security bug with confidential level XWIKI-20614 RXSS via xredirect paramer in DeleteApplication

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          depends on

          Improvement - An improvement or enhancement to an existing feature or task. XCOMMONS-2607 Add a script service for HtmlElementSanitizer

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-20549 Provide a new script service API to check trustfulness of an URI

          • Major - Major loss of function.
          • Closed

          Activity

            People

              surli Simon Urli
              surli Simon Urli
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: