[ https://issues.apache.org/jira/browse/SLING-7658?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Konrad Windszus updated SLING-7658: ----------------------------------- Attachment: SLING-7658-v01.patch > XSSApi.encodeForHtml doesn't leave unicode character escapes untouched > ---------------------------------------------------------------------- > > Key: SLING-7658 > URL: https://issues.apache.org/jira/browse/SLING-7658 > Project: Sling > Issue Type: Bug > Components: XSS Protection API > Affects Versions: XSS Protection API 2.1.0 > Reporter: Konrad Windszus > Priority: Major > Attachments: SLING-7658-v01.patch > > > Whenever {{encodeForHtml}} is called with a string containing a unicode > character escapes > (https://www.w3.org/International/questions/qa-escapes#answer), those are > escaped incorrectly again. I.e. {{✅}} becomes {{✅}}. > Compare with the discussion at > https://www.mail-archive.com/dev@sling.apache.org/msg76863.html. > Attached is a patch with a failing test. -- This message was sent by Atlassian JIRA (v7.6.3#76005)