HTML file type attachments are automatically rendered in IE.

XMLWordPrintable

    • Type: Bug
    • Resolution: Obsolete
    • Priority: Medium
    • None
    • Affects Version/s: 3.5
    • Component/s: None
    • Environment:

      Internet Explorer with Confluence.

      Steps to reproduce

      1. Create following HTML file and upload to any of Confluence page. 
        <script>
alert("Cookie: " + document.cookie);
</script>
      2. Open the file on Internet Explorer 7.
      3. Then, you will see the javascript in that HTML file executed automatically.

      Issue happens with IE9,8,7 with Confluence 3.5.

      Firefox and Safari presents a download 'save as' dialogue box and does not render.

            Assignee:
            Unassigned
            Reporter:
            Vincent Choy (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: