[
https://issues.jboss.org/browse/GTNPORTAL-2514?page=com.atlassian.jira.pl...
]
Gary Hu commented on GTNPORTAL-2514:
------------------------------------
Is it possible that this issue was introduced in EPP 5.2 due to a different implementation
on rendering the error/warning messages on the UI possibly to prevent the cross script
attack?
Html tags included in exception messages are escaped
----------------------------------------------------
Key: GTNPORTAL-2514
URL:
https://issues.jboss.org/browse/GTNPORTAL-2514
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: WebUI
Affects Versions: 3.2.0-GA
Environment: EPP-SP 5.2.1-GA
Reporter: boughzela Aymen
We have some customized exception message includes some html tags, such as
"<br/>", etc.
We expect those html tags could help format the exception messages showing on the dialog
popup box triggered by Site Publisher UI.
However, the html tags apparently are escaped on the UI. It just shows what it is. This
was not happening in EPP 5.1.1.
In EPP5.1
The message would have been
--------------------------
Exception1
Exception2
---------------------------
i.e <br/> acts like a line break.
In EPP5.2.1
I am getting
Exception1<br/>Exception2
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see:
http://www.atlassian.com/software/jira