Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-4822

Using XML symbols (<, >, &) inside the user's name breaks various parts of the UI and causes the PDF export to throw exceptions

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Minor
    • 2.2 RC1, 2.1.2
    • 2.2 M2
    • {Unused} Core
    • None
    • Unknown

    Description

      We should change XWiki#getUserName so that it escapes XML characters.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-3886 Using XML symbols (<, >, &) inside the document title/name/space breaks various parts of the UI and causes the PDF export to throw exceptions

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-4818 XSS injection through usernames (firstname, lastname)

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-9679 Apostrophe in user name generates invalid profile title

          • Major - Major loss of function.
          • Closed

          Activity

            People

              sdumitriu Sergiu Dumitriu
              sdumitriu Sergiu Dumitriu
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: