[OFBIZ-11090] Html escaping missing for renderLink parameters - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: 16.11.05, 17.12.01, 18.12.01, 22.01.01
Fix Version/s: 16.11.06
Component/s: None
Labels:
None

Description

Html escaping missing for renderLink parameters. Parameters should be escaped to avoid Cross Site Scripting.

Attachments

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

OFBIZ-11090.patch
04/Jun/19 10:45
3 kB
Deepak Dixit

Activity

People

Assignee:: Deepak Dixit

Reporter:: Deepak Dixit

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 04/Jun/19 10:44

Updated:: 04/Jun/19 11:00

Resolved:: 04/Jun/19 11:00