PUBLIC - Liferay Portal Community Edition
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-21139

An "Open Script Tag" <script> in the title of a "Blogs Entry" throws Exceptions when viewed

    Details

    • Branch Version/s:
      6.0.x
    • Backported to Branch:
      Committed
    • Similar Issues:
      Show 4 results 

      Description

      1. Add the Blogs Portlet.
      2. Add the Blogs Aggregator Portlet to another page.
      3. Add a Blogs Entry with the title "<script>alert(hello)"

        For 6.1.x:

      • Viewing the Blogs Portlet will throw the attached exception.
      • The Blogs Aggregator Portlet will be displayed like the attached screenshot.
      • Viewing the Blogs Aggregator Portlet will throw the attached exception.

        For 6.0.x:

      • Viewing the Blogs Portlet will NOT throw the attached exception.
      • The Blogs Aggregator Portlet will be displayed like the attached screenshot.
      • Viewing the Blogs Aggregator Portlet will throw the attached exception.

        Activity

        Hide
        Ryan Wan added a comment -

        PASSED Manual Testing following steps in description.

        Reproduced on:
        Tomcat 7.0.21 + MySQL 5.1.58. 6.1.x Revision 90970.

        Fixed on:
        Tomcat 7.0.21 + MySQL 5.1.58. 6.1.x Revision 91295.

        Show
        Ryan Wan added a comment - PASSED Manual Testing following steps in description. Reproduced on: Tomcat 7.0.21 + MySQL 5.1.58. 6.1.x Revision 90970. Fixed on: Tomcat 7.0.21 + MySQL 5.1.58. 6.1.x Revision 91295.
        Hide
        Vicki Tsang added a comment -

        This is being bulk closed in preparation for the new workflow.

        Show
        Vicki Tsang added a comment - This is being bulk closed in preparation for the new workflow.
        Hide
        Pani Gui (Inactive) added a comment -

        PASSED Manual Testing following steps in description.

        Fixed on:
        Tomcat 6.0.33 + MySQL 5. 6.0.x Revision: 94251.

        There isn't exception when viewing the blog entry and blog entry message displays on Blogs Aggregator portlet.

        Show
        Pani Gui (Inactive) added a comment - PASSED Manual Testing following steps in description. Fixed on: Tomcat 6.0.33 + MySQL 5. 6.0.x Revision: 94251. There isn't exception when viewing the blog entry and blog entry message displays on Blogs Aggregator portlet.

          People

          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:
              Days since last comment:
              3 years, 14 weeks, 6 days ago

              Development

                Structure Helper Panel