You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@sling.apache.org by "Joerg Hoh (Jira)" <ji...@apache.org> on 2026/09/14 15:34:00 UTC

[jira] [Assigned] (SLING-13334) Fix input validation gaps

     [ https://issues.apache.org/jira/browse/SLING-13334?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joerg Hoh reassigned SLING-13334:
---------------------------------

    Assignee: Joerg Hoh

> Fix input validation gaps
> -------------------------
>
>                 Key: SLING-13334
>                 URL: https://issues.apache.org/jira/browse/SLING-13334
>             Project: Sling
>          Issue Type: Improvement
>          Components: XSS Protection API
>            Reporter: Joerg Hoh
>            Assignee: Joerg Hoh
>            Priority: Major
>
> Several validation utility methods, intended to make untrusted input safe for use in specific output contexts, checked a different representation of the input than what is ultimately interpreted downstream. This could, in certain contexts, have allowed crafted input to bypass validation and produce unintended behavior at the point of use. 
> Also address excessive resource consumption in the same area.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)