From jira-events at lists.jboss.org Tue Sep 18 23:02:34 2012
Content-Type: multipart/mixed; boundary="===============9081714369420205106=="
MIME-Version: 1.0
From: Trong Tran (JIRA) <jira-events at lists.jboss.org>
To: gatein-issues at lists.jboss.org
Subject: [gatein-issues] [JBoss JIRA] (GTNPORTAL-2578) XSS in page title of
 container
Date: Tue, 18 Sep 2012 23:02:34 -0400
Message-ID: <736337466.8023.1348023754780.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com>

--===============9081714369420205106==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

Trong Tran created GTNPORTAL-2578:
-------------------------------------

             Summary: XSS in page title of container
                 Key: GTNPORTAL-2578
                 URL: https://issues.jboss.org/browse/GTNPORTAL-2578
             Project: GateIn Portal
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Security
    Affects Versions: 3.4.0.Final
            Reporter: Trong Tran
            Assignee: Trong Tran
             Fix For: 3.5.0.Beta01


Add/Edit a page
    Choose container tab
    Drag & drop container ( one row)
    Change title of container by: </title><script>alert("xssed portal")</sc=
ript>
    Click Save
    =3D> it alerts "xssed portal" message

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira

--===============9081714369420205106==--

From jira-events at lists.jboss.org Wed Oct  3 04:52:05 2012
Content-Type: multipart/mixed; boundary="===============0436228540918069125=="
MIME-Version: 1.0
From: Trong Tran (JIRA) <jira-events at lists.jboss.org>
To: gatein-issues at lists.jboss.org
Subject: [gatein-issues] [JBoss JIRA] (GTNPORTAL-2578) XSS in page title of
 container
Date: Wed, 03 Oct 2012 04:52:04 -0400
Message-ID: <269674486.13193.1349254324674.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com>
In-Reply-To: 736337466.8023.1348023754780.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com

--===============0436228540918069125==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable


     [ https://issues.jboss.org/browse/GTNPORTAL-2578?page=3Dcom.atlassian.=
jira.plugin.system.issuetabpanels:all-tabpanel ]

Trong Tran updated GTNPORTAL-2578:
----------------------------------

    Labels: portal-s69  (was: )

    =

> XSS in page title of container
> ------------------------------
>
>                 Key: GTNPORTAL-2578
>                 URL: https://issues.jboss.org/browse/GTNPORTAL-2578
>             Project: GateIn Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) =

>          Components: Security
>    Affects Versions: 3.4.0.Final
>            Reporter: Trong Tran
>            Assignee: Trong Tran
>              Labels: portal-s69
>             Fix For: 3.5.0.Beta01
>
>
> Add/Edit a page
>     Choose container tab
>     Drag & drop container ( one row)
>     Change title of container by: </title><script>alert("xssed portal")</=
script>
>     Click Save
>     =3D> it alerts "xssed portal" message

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira

--===============0436228540918069125==--

From jira-events at lists.jboss.org Thu Oct 11 23:07:03 2012
Content-Type: multipart/mixed; boundary="===============2468561652412139589=="
MIME-Version: 1.0
From: Trong Tran (JIRA) <jira-events at lists.jboss.org>
To: gatein-issues at lists.jboss.org
Subject: [gatein-issues] [JBoss JIRA] (GTNPORTAL-2578) XSS in page title of
 container
Date: Thu, 11 Oct 2012 23:07:03 -0400
Message-ID: <322035772.36832.1350011223021.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com>
In-Reply-To: 736337466.8023.1348023754780.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com

--===============2468561652412139589==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable


     [ https://issues.jboss.org/browse/GTNPORTAL-2578?page=3Dcom.atlassian.=
jira.plugin.system.issuetabpanels:all-tabpanel ]

Trong Tran updated GTNPORTAL-2578:
----------------------------------

    Assignee: Vu Viet Phuong  (was: Trong Tran)

    =

> XSS in page title of container
> ------------------------------
>
>                 Key: GTNPORTAL-2578
>                 URL: https://issues.jboss.org/browse/GTNPORTAL-2578
>             Project: GateIn Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) =

>          Components: Security
>    Affects Versions: 3.4.0.Final
>            Reporter: Trong Tran
>            Assignee: Vu Viet Phuong
>              Labels: portal-s69
>             Fix For: 3.5.0.Beta01
>
>
> Add/Edit a page
>     Choose container tab
>     Drag & drop container ( one row)
>     Change title of container by: </title><script>alert("xssed portal")</=
script>
>     Click Save
>     =3D> it alerts "xssed portal" message

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira

--===============2468561652412139589==--

From jira-events at lists.jboss.org Thu Oct 11 23:50:04 2012
Content-Type: multipart/mixed; boundary="===============4258654577985286146=="
MIME-Version: 1.0
From: Vu Viet Phuong (JIRA) <jira-events at lists.jboss.org>
To: gatein-issues at lists.jboss.org
Subject: [gatein-issues] [JBoss JIRA] (GTNPORTAL-2578) XSS in page title of
 container
Date: Thu, 11 Oct 2012 23:50:03 -0400
Message-ID: <53407233.36857.1350013803008.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com>
In-Reply-To: 736337466.8023.1348023754780.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com

--===============4258654577985286146==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable


     [ https://issues.jboss.org/browse/GTNPORTAL-2578?page=3Dcom.atlassian.=
jira.plugin.system.issuetabpanels:all-tabpanel ]

Work on GTNPORTAL-2578 started by Vu Viet Phuong.

> XSS in page title of container
> ------------------------------
>
>                 Key: GTNPORTAL-2578
>                 URL: https://issues.jboss.org/browse/GTNPORTAL-2578
>             Project: GateIn Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) =

>          Components: Security
>    Affects Versions: 3.4.0.Final
>            Reporter: Trong Tran
>            Assignee: Vu Viet Phuong
>              Labels: portal-s69
>             Fix For: 3.5.0.Beta01
>
>
> Add/Edit a page
>     Choose container tab
>     Drag & drop container ( one row)
>     Change title of container by: </title><script>alert("xssed portal")</=
script>
>     Click Save
>     =3D> it alerts "xssed portal" message

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira

--===============4258654577985286146==--

From jira-events at lists.jboss.org Fri Oct 12 02:54:03 2012
Content-Type: multipart/mixed; boundary="===============7886100506548678139=="
MIME-Version: 1.0
From: Vu Viet Phuong (JIRA) <jira-events at lists.jboss.org>
To: gatein-issues at lists.jboss.org
Subject: [gatein-issues] [JBoss JIRA] (GTNPORTAL-2578) XSS in page title of
 container
Date: Fri, 12 Oct 2012 02:54:03 -0400
Message-ID: <1908582443.37103.1350024843704.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com>
In-Reply-To: 736337466.8023.1348023754780.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com

--===============7886100506548678139==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable


     [ https://issues.jboss.org/browse/GTNPORTAL-2578?page=3Dcom.atlassian.=
jira.plugin.system.issuetabpanels:all-tabpanel ]

Vu Viet Phuong updated GTNPORTAL-2578:
--------------------------------------

              Status: Pull Request Sent  (was: Coding In Progress)
    Git Pull Request: https://github.com/gatein/gatein-portal/pull/209

    =

> XSS in page title of container
> ------------------------------
>
>                 Key: GTNPORTAL-2578
>                 URL: https://issues.jboss.org/browse/GTNPORTAL-2578
>             Project: GateIn Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) =

>          Components: Security
>    Affects Versions: 3.4.0.Final
>            Reporter: Trong Tran
>            Assignee: Vu Viet Phuong
>              Labels: portal-s69
>             Fix For: 3.5.0.Beta01
>
>
> Add/Edit a page
>     Choose container tab
>     Drag & drop container ( one row)
>     Change title of container by: </title><script>alert("xssed portal")</=
script>
>     Click Save
>     =3D> it alerts "xssed portal" message

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira

--===============7886100506548678139==--

From jira-events at lists.jboss.org Fri Oct 12 03:38:03 2012
Content-Type: multipart/mixed; boundary="===============1798072782576516945=="
MIME-Version: 1.0
From: Trong Tran (JIRA) <jira-events at lists.jboss.org>
To: gatein-issues at lists.jboss.org
Subject: [gatein-issues] [JBoss JIRA] (GTNPORTAL-2578) XSS in page title of
 container
Date: Fri, 12 Oct 2012 03:38:03 -0400
Message-ID: <261891473.37177.1350027483091.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com>
In-Reply-To: 736337466.8023.1348023754780.JavaMail.tomcat@jira02.app.mwc.hst.phx2.redhat.com

--===============1798072782576516945==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable


     [ https://issues.jboss.org/browse/GTNPORTAL-2578?page=3Dcom.atlassian.=
jira.plugin.system.issuetabpanels:all-tabpanel ]

Trong Tran updated GTNPORTAL-2578:
----------------------------------

        Status: Resolved  (was: Pull Request Sent)
    Resolution: Done

    =

> XSS in page title of container
> ------------------------------
>
>                 Key: GTNPORTAL-2578
>                 URL: https://issues.jboss.org/browse/GTNPORTAL-2578
>             Project: GateIn Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) =

>          Components: Security
>    Affects Versions: 3.4.0.Final
>            Reporter: Trong Tran
>            Assignee: Vu Viet Phuong
>              Labels: portal-s69
>             Fix For: 3.5.0.Beta01
>
>
> Add/Edit a page
>     Choose container tab
>     Drag & drop container ( one row)
>     Change title of container by: </title><script>alert("xssed portal")</=
script>
>     Click Save
>     =3D> it alerts "xssed portal" message

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira

--===============1798072782576516945==--