[CONFSERVER-16209] XSS in PDF screen

The "PDF Export Stylesheet" field is not encoded.

For consistency, this should only show up in 3.0.1

Per Fragemann [Atlassian] added a comment - 26/Nov/2009 8:43 AM For consistency, this should only show up in 3.0.1

The patch fix this vulnerability in Confluence version 3.0.0.

Giles Gaskell [Atlassian] added a comment - 11/Aug/2009 1:32 AM The patch fix this vulnerability in Confluence version 3.0.0.

Attached is the fixed version of the pdf plugin

Brian Nguyen (Inactive) added a comment - 10/Jul/2009 3:05 AM Attached is the fixed version of the pdf plugin

Anatoli added a comment - 01/Jul/2009 8:22 AM

Chris,

are you going to release the plugin and commit the new version into branch?

Anatoli added a comment - 01/Jul/2009 8:22 AM Chris, are you going to release the plugin and commit the new version into branch?

Committed. The plugin needs to be released and Confluence upgraded.

Chris Broadfoot [Atlassian] added a comment - 29/Jun/2009 6:32 AM Committed. The plugin needs to be released and Confluence upgraded.