[jbossseam-issues] [JBoss JIRA] Created: (JBSEAM-2711) Less than symbol not properly escaped in feedAggregator title rendering

Christian Bauer (JIRA) jira-events at lists.jboss.org
Sun Mar 9 05:07:57 EDT 2008


Less than symbol not properly escaped in feedAggregator title rendering
-----------------------------------------------------------------------

                 Key: JBSEAM-2711
                 URL: http://jira.jboss.com/jira/browse/JBSEAM-2711
             Project: JBoss Seam
          Issue Type: Bug
          Components: Wiki
            Reporter: Christian Bauer
         Assigned To: Christian Bauer
            Priority: Critical


A feed entry with <foo in the title renders as-is, without escaping the < as &lt;. This is potentially even an XSS hole.



-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the seam-issues mailing list