[ 
https://issues.apache.org/jira/browse/NETBEANS-720?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Rami Swailem updated NETBEANS-720:
----------------------------------
    Attachment: Screen Shot 2018-04-23 at 16.27.24.png

> HTML injection in search result tab titles and MRU dropdown list
> ----------------------------------------------------------------
>
>                 Key: NETBEANS-720
>                 URL: https://issues.apache.org/jira/browse/NETBEANS-720
>             Project: NetBeans
>          Issue Type: Bug
>          Components: utilities - Search
>    Affects Versions: 8.2, 9.0, Next
>            Reporter: dennis lucero
>            Priority: Minor
>         Attachments: Screen Shot 2018-04-23 at 16.27.24.png
>
>
> When searching for something like {{<html><b>HTML</b> <i>injection</i>}} 
> search tab titles and the MRU dropdown list in the search dialog show the 
> HTML formatted text, not the raw input. This also means searching for 
> {{<html>}} produces a tab with an empty title.
> Found in NetBeans 8.2, reproduced with the latest build 
> incubator-netbeans-release-272-on-20180418.
> (I’d attach a screenshot but JIRA complains about a missing token.)
> HTML can be disabled with something like
> {{public static void disableHtml(final JComponent component) {}}
> {{    component.putClientProperty("html.disable", Boolean.TRUE);}}
> {{}}}
>  (see [http://www.oracle.com/technetwork/java/seccodeguide-139067.html#3-7])



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@netbeans.apache.org
For additional commands, e-mail: commits-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Reply via email to