[
https://issues.apache.org/jira/browse/SLING-13335?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Joerg Hoh updated SLING-13335:
------------------------------
Description:
A component of the bundle's web console administration interface displayed
certain recorded data without sufficient output encoding for the context in
which it was rendered. This could, under certain conditions, have allowed
content to be interpreted in unintended ways within an authenticated
administrator's browser session.
h5. Details
* xss.js: Blocked-URLs console tab renders attacker URLs as raw HTML.
* XSSProtectionAPIWebconsolePlugin: consoleRoot single-quote breakout defeats
escapeHtml4 in console plugin.
Commit:
https://github.com/apache/sling-org-apache-sling-xss/commit/75d268dba46a5365313ce26b870d78907fc9b969
was:
A component of the bundle's web console administration interface displayed
certain recorded data without sufficient output encoding for the context in
which it was rendered. This could, under certain conditions, have allowed
content to be interpreted in unintended ways within an authenticated
administrator's browser session.
h5 Details
* xss.js: Blocked-URLs console tab renders attacker URLs as raw HTML.
* XSSProtectionAPIWebconsolePlugin: consoleRoot single-quote breakout defeats
escapeHtml4 in console plugin.
Commit:
https://github.com/apache/sling-org-apache-sling-xss/commit/75d268dba46a5365313ce26b870d78907fc9b969
> Insufficient output encoding in Webconsole plugin
> -------------------------------------------------
>
> Key: SLING-13335
> URL: https://issues.apache.org/jira/browse/SLING-13335
> Project: Sling
> Issue Type: Improvement
> Components: XSS Protection API
> Reporter: Joerg Hoh
> Assignee: Joerg Hoh
> Priority: Major
> Fix For: XSS Protection API 2.4.12
>
>
> A component of the bundle's web console administration interface displayed
> certain recorded data without sufficient output encoding for the context in
> which it was rendered. This could, under certain conditions, have allowed
> content to be interpreted in unintended ways within an authenticated
> administrator's browser session.
> h5. Details
> * xss.js: Blocked-URLs console tab renders attacker URLs as raw HTML.
> * XSSProtectionAPIWebconsolePlugin: consoleRoot single-quote breakout defeats
> escapeHtml4 in console plugin.
> Commit:
> https://github.com/apache/sling-org-apache-sling-xss/commit/75d268dba46a5365313ce26b870d78907fc9b969
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
