[
https://issues.apache.org/jira/browse/JSPWIKI-173?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Janne Jalkanen resolved JSPWIKI-173.
------------------------------------
Resolution: Fixed
Fixed in 2.6.1-rc-3. There actually was a routine to catch these, but
unfortunately it was writing them unmodified to the rendered display as an
error, which in turn caused another error, which would not be caught. D'oh!
> 0x1D in page creates NullPointerException in RenderingManager
> -------------------------------------------------------------
>
> Key: JSPWIKI-173
> URL: https://issues.apache.org/jira/browse/JSPWIKI-173
> Project: JSPWiki
> Issue Type: Bug
> Components: Core & storage
> Affects Versions: 2.4.104, 2.6.1
> Environment: tested on WindowsXP with version 2.4.104 as well as on
> sandbox.jspwiki.org (running 2.6?)
> Reporter: Torsten Hildebrandt
> Priority: Critical
>
> Enter something containing ascii #1D in an edit-box, and press save. An
> alternative way is to add this character manually into a wiki page on disc.
> If the page is about to be displayed, this creates an error-message like:
> JSPWiki has detected an error
> Error Message
> Exception
> java.lang.NullPointerException
> Place where detected
> com.ecyrd.jspwiki.render.RenderingManager.getHTML(), line 254
> ...
> This is makes a page containing this character undisplayable.
> I consider this bug quite severe as it allows to create some form of denial
> of service for all editable pages .
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
