Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-22763

No required right warnings about wiki syntax in macro parameters with wiki syntax

    XMLWordPrintable

Details

    • Unit
    • Unknown
    • N/A
    • N/A

    Description

      Steps to reproduce:

      As a user without script or programming right, create a page with the following content:

      {{info title="{{velocity~}~}
      Evil
      {{/velocity~}~}"}}
      Type your information message here.
      {{/info}} 

      As an admin, edit the page.

      Expected result:

      A warning about the script macro in the title is displayed.

      Actual result:

      No warning is displayed and after saving, the script macro is executed. Note that this is not specific to the info macro, this is also the case for wiki macros with parameters of type "Wiki".

      Attachments

        Issue Links

          Activity

            People

              MichaelHamann Michael Hamann
              MichaelHamann Michael Hamann
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: