Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-22799

Required rights analyzers of the raw, HTML and cache macro are case-sensitive

    XMLWordPrintable

Details

    • Unit
    • Unknown
    • N/A
    • N/A

    Description

      Steps to reproduce:

      1. As a user without script right, add a macro with dangerous parameter that isn't lowercase to the content of a page like
        {{html Wiki=true}}{{groovy}}println("Hello from Groovy!"){{/groovy}}{{/html}}
      2. Edit this page as a user with programming right.

      Expected result:

      There is a warning regarding the nested Groovy macro.

      Actual result:

      There is no warning, as the required rights analyzer ignores the "Wiki" parameter.

      Attachments

        Issue Links

          Activity

            People

              MichaelHamann Michael Hamann
              MichaelHamann Michael Hamann
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: