Details
-
Bug
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
5.1 EE SP3 (5.1.6), 5.2 EE SP1 (5.2.5)
-
All
Description
The "Return to Full Page" link does not work on some portlets because characters in the URL were unnecessarily escaped to prevent XSS. To address this issue, HtmlUtil.escape() will no longer escape the "-" and "_" character.
Attachments
Issue Links
- is related to
-
LPS-4700 Phishin + XSS escape is unnecessarily strong, should allow "-" and "_"
- Closed