[SLING-7770] URLs ending in "/" get filtered by AntiSamy

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: XSS Protection API 2.0.8
• Fix Version/s: XSS Protection API 2.0.10
• Component/s: Extensions
• Assignee: Radu Cotescu
• Reporter: Radu Cotescu
• Created: 08/Jul/18 13:00
• Updated: 12/Jul/18 09:11
• Resolved: 08/Jul/18 13:11

Description

URLs ending in '/' are filtered by AntiSamy. The bug was introduce by SLING-7741.

Issue Links

• is caused by: SLING-7741 org.apache.sling.xss.impl.XSSAPIImpl#getValidHref doesn't correctly handle the ":" character in URL fragments