You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@jspwiki.apache.org by "Juan Pablo Santos Rodríguez (JIRA)" <ji...@apache.org> on 2019/05/29 22:30:00 UTC

[jira] [Closed] (JSPWIKI-1108) interwiki links with illegal characters causes XSS vulnerability

     [ https://issues.apache.org/jira/browse/JSPWIKI-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Juan Pablo Santos Rodríguez closed JSPWIKI-1108.
------------------------------------------------
    Resolution: Fixed

> interwiki links with illegal characters causes XSS vulnerability
> ----------------------------------------------------------------
>
>                 Key: JSPWIKI-1108
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-1108
>             Project: JSPWiki
>          Issue Type: Improvement
>          Components: Core &amp; storage
>            Reporter: brushed
>            Priority: Minor
>             Fix For: 2.11.0-M4
>
>
> Create a inter wiki link with the text {{[<script>alert`1`</script>://test.com]}}.
>  You get an interwiki reference error, but also JS popup during edit(preview) and after saving the page.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)