-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Medium
-
Affects Version/s: 2.3, 2.4, 2.4.5
-
Component/s: None
The activity (or usage) plugin includes properties with values like 'Next >>' unescaped in the HTML. This tag soup can be interpreted differently by different combinations of filters, servers and clients, so we need to fix it.
For example, on the following line:
It currently reads:
$action.getText("previous.name")</a> |
And should be:
$generalUtil.htmlEncode($action.getText("previous.name"))</a> |
—
A simple workaround for customers is to remove the angle brackets from the properties with keys 'previous.name' and 'next.name' in the file:
confluence/WEB-INF/classes/com/atlassian/confluence/core/ConfluenceActionSupport.properties