[jira] [Updated] (JCR-3950) XSS in DirListingExportHandler
[ https://issues.apache.org/jira/browse/JCR-3950?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-3950: Fix Version/s: 2.14 > XSS in DirListingExportHandler > -- > > Key: JCR-3950 > URL: https://issues.apache.org/jira/browse/JCR-3950 > Project: Jackrabbit Content Repository > Issue Type: Bug > Components: jackrabbit-jcr-server >Affects Versions: 2.0.5, 2.2.13, 2.4.5, 2.6.5, 2.10.1, 2.8.1, 2.12.0 >Reporter: Julian Reschke >Assignee: Julian Reschke > Fix For: 2.0.6, 2.4.6, 2.6.6, 2.10.2, 2.8.2, 2.13.0, 2.12.1, 2.14 > > > The XSS vulnerability patched in JCR-3630 applies to the parent name (and the > repository metadata) as well, thus more needs to be escaped. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Updated] (JCR-3950) XSS in DirListingExportHandler
[ https://issues.apache.org/jira/browse/JCR-3950?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Julian Reschke updated JCR-3950: Summary: XSS in DirListingExportHandler (was: CLONE - XSS in DirListingExportHandler) > XSS in DirListingExportHandler > -- > > Key: JCR-3950 > URL: https://issues.apache.org/jira/browse/JCR-3950 > Project: Jackrabbit Content Repository > Issue Type: Bug > Components: jackrabbit-jcr-server >Affects Versions: 2.0.5, 2.2.13, 2.4.5, 2.6.5, 2.10.1, 2.8.1, 2.12.0 >Reporter: Julian Reschke >Assignee: Julian Reschke > Fix For: 2.0.6, 2.4.6, 2.6.6, 2.10.2, 2.8.2, 2.13.0, 2.12.1 > > > The XSS vulnerability patched in JCR-3630 applies to the parent name (and the > repository metadata) as well, thus more needs to be escaped. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
