Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
Description
Clarify the javadoc for this method to explain more precisely the limitations of the method in terms of string escaping such that folks realize that there could be a vulnerability. See TEXT-42 for more specifics.
Attachments
Issue Links
- relates to
-
TEXT-42 [XSS] Possible attacks through StringEscapeUtils.escapeEcmaScript?
- Open