Details
-
Bug
-
Resolution: Fixed
-
Major
-
2.3.2, 2.4
-
None
-
security, xss
-
Integration
-
Trivial
-
Description
Escaping test result:
org.xwiki.escaping.framework.EscapingError: Escaping test failed.
* Parameter: "xcontinue"
Tested file: templates/previewactions.vm
URL: http://localhost:8080/xwiki/bin/view/Main/WebHome?skin=default&xcontinue=aaa%22bbb%27ccc%3Eddd%3Ceee&vm=previewactions.vm&xpage=xpart&language=en
List of validation errors:
line 1 column 34 FATAL: Unescaped apostrophe character
line 1 column 30 FATAL: Unescaped quote character
line 5 column 83 FATAL: Unescaped apostrophe character
* Parameter: "xeditaction"
Tested file: templates/previewactions.vm
URL: http://localhost:8080/xwiki/bin/view/Main/WebHome?skin=default&vm=previewactions.vm&xeditaction=aaa%22bbb%27ccc%3Eddd%3Ceee&xpage=xpart&language=en
List of validation errors:
line 4 column 85 FATAL: Unescaped apostrophe character
line 8 column 95 FATAL: Unescaped apostrophe character
line 8 column 91 FATAL: Unescaped quote character
* Parameter: "editor"
Tested file: templates/previewactions.vm
URL: http://localhost:8080/xwiki/bin/view/Main/WebHome?skin=default&vm=previewactions.vm&xpage=xpart&editor=aaa%22bbb%27ccc%3Eddd%3Ceee&language=en
List of validation errors:
line 6 column 80 FATAL: Unescaped apostrophe character