[ https://issues.apache.org/jira/browse/SLING-8966?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Konrad Windszus updated SLING-8966: ----------------------------------- Description: There should be escaping of HTML in dynamic variables as discussed in https://issues.apache.org/jira/browse/SLING-5746?focusedCommentId=17009675&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-17009675 (was: There should be protection against HTML in dynamic variables as discussed in https://issues.apache.org/jira/browse/SLING-5746?focusedCommentId=17009675&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-17009675) > Escape all dynamic variables > ---------------------------- > > Key: SLING-8966 > URL: https://issues.apache.org/jira/browse/SLING-8966 > Project: Sling > Issue Type: Improvement > Components: Installer > Affects Versions: Installer Console 1.0.2 > Reporter: Konrad Windszus > Assignee: Konrad Windszus > Priority: Major > Fix For: Installer Console 1.0.4 > > > There should be escaping of HTML in dynamic variables as discussed in > https://issues.apache.org/jira/browse/SLING-5746?focusedCommentId=17009675&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-17009675 -- This message was sent by Atlassian Jira (v8.3.4#803005)