You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Radu Cotescu (Jira)" <ji...@apache.org> on 2019/10/25 12:06:00 UTC
[jira] [Updated] (SLING-8775) java.lang.StackOverflowError in
XSSAPIImpl.getValidHref for long URLs
[ https://issues.apache.org/jira/browse/SLING-8775?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Radu Cotescu updated SLING-8775:
--------------------------------
Summary: java.lang.StackOverflowError in XSSAPIImpl.getValidHref for long URLs (was: java.lang.StackOverflowError in XSSAPI.getValidHref)
> java.lang.StackOverflowError in XSSAPIImpl.getValidHref for long URLs
> ---------------------------------------------------------------------
>
> Key: SLING-8775
> URL: https://issues.apache.org/jira/browse/SLING-8775
> Project: Sling
> Issue Type: Bug
> Components: XSS Protection API
> Affects Versions: XSS Protection API 2.1.0, XSS Protection API 2.0.8, XSS Protection API 2.0.10, XSS Protection API 2.0.12, XSS Protection API 2.0.14, XSS Protection API 2.1.6, XSS Protection API 2.1.8
> Reporter: Antonio Sanso
> Assignee: Radu Cotescu
> Priority: Major
>
> The regex pattern in XSSAPI.getValidHref may cause StackOverflowError .
> try 'xssAPI.getValidHref(String)' API throwing StackOverflowError. Input string param that has a length of '1700' or more.
> {code}
> Caused by: java.lang.StackOverflowError
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$BmpCharProperty.match(Pattern.java:3951)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$CharPropertyGreedy.match(Pattern.java:4293)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Branch.match(Pattern.java:4736)
> at java.base/java.util.regex.Pattern$GroupHead.match(Pattern.java:4791)
> at java.base/java.util.regex.Pattern$Loop.match(Pattern.java:4928)
> at java.base/java.util.regex.Pattern$GroupTail.match(Pattern.java:4850)
> at java.base/java.util.regex.Pattern$BranchConn.match(Pattern.java:4700)
> at java.base/java.util.regex.Pattern$CharProperty.match(Pattern.java:3927)
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)