Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-20954

HTML escapes displayed in the comment history when uploading an attachment

    XMLWordPrintable

Details

    • Unknown
    • N/A
    • N/A

    Description

      To reproduce:

      • Have a local file named Screenshot 2023-05-30 at 15.34.19.png
      • Drag and drop it in the attachment docextra tab, on top of the "choose files..." selector
      • Check the history and notice the HTML escapes:

      Attachments

        1. Screenshot 2023-05-30 at 15.34.19.png
          137 kB
          Vincent Massol
        2. works-14.7.png
          137 kB
          Vincent Massol

        Issue Links

          depends on

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-20968 Introduce new localization APIs to get rendered translations for a target syntax

          • Major - Major loss of function.
          • Closed
          is caused by

          Security - Security bug with confidential level XWIKI-20339 RXSS in URL path - /xwiki/bin/delattachment/XWiki/<USER>/<PAYLOAD>

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Activity

            People

              vmassol Vincent Massol
              vmassol Vincent Massol
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: