Details

      Description

      Reproduction steps:

      • Deploy AntiSamy Hook
      • Add Wiki Portlet to a page
      • Edit Front page and choose for HTML format
      • Click on Source and add some XSS ("><script>alert('Wiki Page Preview');</script>)
      • Save the page
      • Content has been sanitized OK
      • Edit the page again as previously
      • Click the Preview button

      The alert message is displayed.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              kenji.heigel Kenji Heigel
              Reporter:
              tamas.molnar Tamas Molnar
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                7 years, 45 weeks, 6 days ago

                  Packages

                  Version Package
                  6.1.2 CE GA3
                  6.1.30 EE GA3
                  6.2.0 CE M2
                  6.2.0 CE M3