Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-22422

XWiki shouldn't allow passing URLs with %25 in it

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • 15.10
    • None
    • None
    • Unknown

    Description

      See https://github.com/jetty/jetty.project/issues/12162

      In short it goes against the Servlet spec.

      What it means:

      • Disallowing % in page names and attachment names, using a default page naming strategy
      • Check if we have jobs using % in their ids and if so change their ids. Document a best practice to not use % in job id names.
      • Anything else?

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-22428 XWiki shouldn't allow passing URLs with an empty path segment in it

          • Major - Major loss of function.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-22435 XWiki shouldn't allow passing URLs with %2F in it

          • Major - Major loss of function.
          • Open

          Task - A task that needs to be done. XWIKI-21211 Upgrade the standalone packaging to Jetty 12.0.12

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-19167 Make XWiki work on Jetty 10.0.3+ without any URI compliance config

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Activity

            People

              Unassigned Unassigned
              vmassol Vincent Massol
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated: