[gatein-issues] [JBoss JIRA] (GTNPORTAL-2412) [XSS] initialURI parameter is vulnerable to script injection

[XSS] initialURI parameter is vulnerable to script injection ------------------------------------------------------------ Key: GTNPORTAL-2412 URL: https://issues.jboss.org/browse/GTNPORTAL-2412 Project: GateIn Portal Issue Type: Bug Security Level: Public(Everyone can see) Reporter: kien nguyen Assignee: kien nguyen Labels: portal-s68 Fix For: 3.4.0.Final Attachments: XSS.png *Step to reproduces: Paste this attack vector into address bar & hit Enter http://plf-3.5.3-snapshot.acceptance.exoplatform.org/portal/j_security_ch... >>> result: pop-up shown (see attachment)