You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@sling.apache.org by "Carsten Ziegeler (JIRA)" <ji...@apache.org> on 2017/04/26 10:20:04 UTC

[jira] [Resolved] (SLING-6787) HTMLRendererServlet shoud properly encode output

     [ https://issues.apache.org/jira/browse/SLING-6787?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carsten Ziegeler resolved SLING-6787.
-------------------------------------
    Resolution: Fixed
      Assignee: Carsten Ziegeler

Applied the patch in rev 1792724.
For the get servlet it's fine to depend on the XSS api

> HTMLRendererServlet shoud properly encode output
> ------------------------------------------------
>
>                 Key: SLING-6787
>                 URL: https://issues.apache.org/jira/browse/SLING-6787
>             Project: Sling
>          Issue Type: Improvement
>          Components: Servlets
>    Affects Versions: Servlets Get 2.1.18
>            Reporter: Alex COLLIGNON
>            Assignee: Carsten Ziegeler
>             Fix For: Servlets Get 2.1.24
>
>         Attachments: 0001-SLING-6787-HTMLRendererServlet-shoud-properly-encode.patch
>
>
> Some of the values rendered by HTMLRendererServlet can be (better) encoded.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)