[
https://issues.apache.org/jira/browse/SLING-760?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12653409#action_12653409
]
Felix Meschberger commented on SLING-760:
-----------------------------------------
I am not sure, whether it is the task fo the sendError method to escape the
message. Given that the message might also be logged or such just xml escaping
it might not be really correct at this location.
> Filter characters in http error messages
> ----------------------------------------
>
> Key: SLING-760
> URL: https://issues.apache.org/jira/browse/SLING-760
> Project: Sling
> Issue Type: Bug
> Components: Servlets Get
> Affects Versions: Engine 2.0.2
> Reporter: Bertrand Delacretaz
> Priority: Minor
> Fix For: Engine 2.0.4
>
>
> The default get servlet includes the supplied extension as is in the "No
> renderer for extension" error page, it should filter it to avoid garbling the
> error page depending on the extension.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
