[
https://issues.apache.org/jira/browse/SLING-13333?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Joerg Hoh reassigned SLING-13333:
---------------------------------
Assignee: Joerg Hoh
> Fix potential HTML sanitization weakness in fallback error-handling path
> ------------------------------------------------------------------------
>
> Key: SLING-13333
> URL: https://issues.apache.org/jira/browse/SLING-13333
> Project: Sling
> Issue Type: Improvement
> Components: XSS Protection API
> Reporter: Joerg Hoh
> Assignee: Joerg Hoh
> Priority: Major
>
> An internal error-recovery path used during HTML/URL sanitization could,
> under certain conditions, cause sanitization to fall back to an alternate
> code path whose behavior was less strict than the primary path, reducing the
> effectiveness of input sanitization in some scenarios.
> Also address excessive resource consumption in the same area.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
