Details
-
Bug
-
Resolution: Fixed
-
Major
-
2.4.3, 2.5 M2
-
None
-
security, xss
-
Integration
-
Trivial
-
Description
Escaping test result:
org.xwiki.escaping.framework.EscapingError: Escaping test failed.
* Parameter: "rev"
Tested file: templates/viewheader.vm
URL: http://127.0.0.1:8080/xwiki/bin/view/Main/WebHome?skin=default&vm=viewheader.vm&xpage=xpart&rev=aaa%22bbb%27ccc%3Eddd%3Ceee&language=en
List of validation errors:
line 17 column 110 ERROR: Unescaped < character
line 17 column 106 ERROR: Unescaped > character
line 23 column 110 ERROR: Unescaped < character
line 23 column 106 ERROR: Unescaped > character
line 24 column 128 ERROR: Unescaped < character
line 24 column 124 ERROR: Unescaped > character