[SLING-7323] Optimise URL handling

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: XSS Protection API 1.0.4, XSS Protection API 2.0.0, XSS Protection API Compat 1.1.0
• Fix Version/s: XSS Protection API 2.0.4
• Component/s: XSS Protection API
• Assignee: Radu Cotescu
• Reporter: Radu Cotescu
• Created: 22/Dec/17 09:12
• Updated: 25/Jan/19 17:14
• Resolved: 28/Dec/17 13:05

Description

URL inputs should be properly decoded before being passed to AntiSamy.

Issue Links

• blocks: SLING-7953 Switch from legacy commons lang 2 to commons lang 3
• links to: CVE-2017-15717
• links to: CVE-2017-15717 announcement