Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-94153

Page tree on side bar not rendering page title correctly when title contains path traversal strings

XMLWordPrintable

      Issue Summary

      This is reproducible on Data Center: (yes)

      If the page title contains one of the following characters sets, the page tree displays as 

      $htmlUtil.htmlEncode($content.displayTitle)

      ../ 
      ..\ 
      /.. 
      \..
      

      Steps to Reproduce

      • Create a page, with one of the above strings in the title.
      • Publish/save
      • Check the links in the Page Tree on side bar

      Expected Results

      All the links should display encoded results of displayTitle.

      Actual Results

      Title is not encoded correctly

      Workaround

      There is no obvious workaround found.

            a2879c3b3278 Jordan Anslow
            8b5c2ab424ac Jing Zheng
            Votes:
            2 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: