[
https://issues.apache.org/jira/browse/JCR-3950?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15168718#comment-15168718
]
Julian Reschke edited comment on JCR-3950 at 2/26/16 9:51 AM:
--------------------------------------------------------------
trunk: http://svn.apache.org/r1732436
2.12: http://svn.apache.org/r1732437
2.10: http://svn.apache.org/r1732438
2.8: http://svn.apache.org/r1732439
2.6: http://svn.apache.org/r1732440
was (Author: reschke):
trunk: http://svn.apache.org/r1732436
2.12: http://svn.apache.org/r1732437
2.10: http://svn.apache.org/r1732438
2.8: http://svn.apache.org/r1732439
> CLONE - XSS in DirListingExportHandler
> --------------------------------------
>
> Key: JCR-3950
> URL: https://issues.apache.org/jira/browse/JCR-3950
> Project: Jackrabbit Content Repository
> Issue Type: Bug
> Components: jackrabbit-jcr-server
> Affects Versions: 2.0.5, 2.2.13, 2.4.5, 2.6.5, 2.10.1, 2.8.1, 2.12.0
> Reporter: Julian Reschke
> Assignee: Julian Reschke
> Fix For: 2.6.6, 2.10.2, 2.8.2, 2.13.0, 2.12.1
>
>
> The XSS vulnerability patched in JCR-3630 applies to the parent name (and the
> repository metadata) as well, thus more needs to be escaped.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
