[#CONF-11585] Mailbox Import errors not escaped

Confluence

Created: 27/Apr/08 07:23 PM Updated: 02/May/08 01:02 AM

Component/s:

Importing, Spaces

Affects Version/s:

2.8

Fix Version/s:

2.8.1

Time Tracking:

Not Specified

Participants:	Chris Broadfoot [Atlassian] and Don Willis [Atlassian]
Since last comment:	31 weeks ago
Resolution Date:	02/May/08 01:02 AM
Labels:

Description

« Hide

Go to "SpaceAdmin"
Select "Mailbox Import"
Specify location of mbox file on server with the XSS code, e.g. <script>alert('XSS')</script>
Submit the form
The embedded JavaScript is executed

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Added an i18n key for this error – also the errors are now encoded.