Details
-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
High
-
Resolution: Fixed
-
Affects Version/s: 2.10
-
Fix Version/s: 3.1-m7
-
Component/s: None
-
Labels:
-
Bug Fix Policy:
Description
- Create a user with username "><script>alert('hahahaha')</script>
- User creates a personal space
- Try to add a page to the personal space
This is caused by
<meta id="confluence-space-key" name="confluence-space-key" content="$spaceKey">
However since the personal space doesn't work too well with usernames with crazy letters, I don't think its a Blocker.