[DELTASPIKE-752] ensure a secure maximum length of the window-id - ASF JIRA

Voters

Watch issue

Watchers

Link

Clone

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Bug
Status: Closed
Priority: Critical
Resolution: Fixed
Affects Version/s: 1.0.3
Fix Version/s: 1.1.0
Component/s: JSF-Module, JSF22-Module
Labels:
None

Description

if the window-id is too long, we would need to escape it to avoid XSS.

Attachments

Activity

Comment

This comment will be Viewable by All Users Viewable by All Users

Cancel

People

Assignee:: Unassigned

Reporter:: Heiko Kopp

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 25/Oct/14 19:14

Updated:: 04/Nov/14 21:15

Resolved:: 27/Oct/14 11:13

Agile

Slack

Issue deployment