[gatein-issues] [JBoss JIRA] (GTNPORTAL-2578) XSS in page title of container

[Trong Tran (JIRA)]

     [ https://issues.jboss.org/browse/GTNPORTAL-2578?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Trong Tran updated GTNPORTAL-2578:
----------------------------------

        Status: Resolved  (was: Pull Request Sent)
    Resolution: Done

    
> XSS in page title of container
> ------------------------------
>
>                 Key: GTNPORTAL-2578
>                 URL: https://issues.jboss.org/browse/GTNPORTAL-2578
>             Project: GateIn Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Security
>    Affects Versions: 3.4.0.Final
>            Reporter: Trong Tran
>            Assignee: Vu Viet Phuong
>              Labels: portal-s69
>             Fix For: 3.5.0.Beta01
>
>
> Add/Edit a page
>     Choose container tab
>     Drag & drop container ( one row)
>     Change title of container by: </title><script>alert("xssed portal")</script>
>     Click Save
>     => it alerts "xssed portal" message

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira