Archiva

Cannot delete patterns with single and double quotes.

Details

  • Number of attachments :
    0

Description

Add/edit Proxy Connector:

  • Blacklist: cannot delete patterns with ' and "
  • whitelist: cannot delete patterns with '

Repository Scanning:

  • cannot delete patterns with ' and "

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Brett Porter added a comment -

This is a (very obscure) way to inject some code, for example: 1', ''); alert('XSS'); setAndSubmit('pattern', '1

Show
Brett Porter added a comment - This is a (very obscure) way to inject some code, for example: 1', ''); alert('XSS'); setAndSubmit('pattern', '1
Hide
Permalink
Olivier Lamy added a comment -

more an escape javascript issue

Show
Olivier Lamy added a comment - more an escape javascript issue
Hide
Permalink
Olivier Lamy added a comment -

fixed r1178794 and r1178795

Show
Olivier Lamy added a comment - fixed r1178794 and r1178795

People

Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved:
Atlassian JIRA (v4.4.3#663-r165197) | Report a problem
Powered by a free Atlassian JIRA open source license for Codehaus. Try JIRA - bug tracking software for your team.