Details
-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
15.10
-
None
-
None
-
Unknown
-
Description
This does against the servlet spec.
Example from the escaping test: http://127.0.0.1:8080/xwiki/bin/view//Translations?skin=flamingo&language=aaa%22bbb%27ccc%3Eddd%3Ceee&form_token=aZ3yMKrO35131Z2eVzQZig
Attachments
Issue Links
- is related to
-
XWIKI-22422 XWiki shouldn't allow passing URLs with %25 in it
- Open
- relates to
-
XWIKI-19167 Make XWiki work on Jetty 10.0.3+ without any URI compliance config
- Open