Details
-
Bug
-
Resolution: Fixed
-
Major
-
2.3.2, 2.4, 2.5 M1
-
None
-
security, xss
-
Integration
-
Trivial
-
Description
Escaping test result:
org.xwiki.escaping.framework.EscapingError: Escaping test failed.
* Parameter: "rev"
Tested file: templates/rollback.vm
URL: http://127.0.0.1:8080/xwiki/bin/view/Main/WebHome?skin=default&vm=rollback.vm&xpage=xpart&rev=aaa%22bbb%27ccc%3Eddd%3Ceee&language=en
List of validation errors:
line 147 column 69 ERROR: Unescaped apostrophe character
line 147 column 65 ERROR: Unescaped quote character