[JSPWIKI-1108] interwiki links with illegal characters causes XSS vulnerability

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.11.0-M4
• Component/s: Core & storage
• Assignee: Unassigned
• Reporter: Dirk Frederickx
• Created: 23/Apr/19 18:05
• Updated: 29/May/19 22:29
• Resolved: 29/May/19 22:29

Description

Create a inter wiki link with the text [<script>alert`1`</script>://test.com].

You get an interwiki reference error, but also JS popup during edit(preview) and after saving the page.