You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@sling.apache.org by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 15:57:00 UTC

[jira] [Assigned] (SLING-13335) Insufficient output encoding in Webconsole plugin

     [ https://issues.apache.org/jira/browse/SLING-13335?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joerg Hoh reassigned SLING-13335:
---------------------------------

    Assignee: Joerg Hoh

> Insufficient output encoding in Webconsole plugin
> -------------------------------------------------
>
>                 Key: SLING-13335
>                 URL: https://issues.apache.org/jira/browse/SLING-13335
>             Project: Sling
>          Issue Type: Improvement
>          Components: XSS Protection API
>            Reporter: Joerg Hoh
>            Assignee: Joerg Hoh
>            Priority: Major
>
> A component of the bundle's web console administration interface displayed certain recorded data without sufficient output encoding for the context in which it was rendered. This could, under certain conditions, have allowed content to be interpreted in unintended ways within an authenticated administrator's browser session.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)