Joerg Hoh created SLING-13333:
---------------------------------
Summary: Fix potential HTML sanitization weakness in fallback
error-handling path
Key: SLING-13333
URL: https://issues.apache.org/jira/browse/SLING-13333
Project: Sling
Issue Type: Improvement
Components: XSS Protection API
Reporter: Joerg Hoh
An internal error-recovery path used during HTML/URL sanitization could, under
certain conditions, cause sanitization to fall back to an alternate code path
whose behavior was less strict than the primary path, reducing the
effectiveness of input sanitization in some scenarios.
Also address excessive resource consumption in the same area.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
