Details
-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
15.9-rc-1
-
None
-
Unknown
-
Description
Steps to reproduce:
- As a user without script right, save a page with a code macro with a script reference like
{{code source="script:doc"/}}
- As a user with script macro, try editing the page.
Expected result:
There is a warning regarding the script right that will be granted to the code macro.
Actual result:
There isn't any warning.
I don't see how this could have a security impact as the code macro doesn't execute the displayed content and there shouldn't be any variables in the script context that contain sensitive data.
Attachments
Issue Links
- relates to
-
XWIKI-22821 Allow having generic analyzers for different types of macro arguments
- Open