Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-94153

Page tree on side bar not rendering page title correctly when title contains path traversal strings

    XMLWordPrintable

Details

    Description

      Issue Summary

      This is reproducible on Data Center: (yes)

      If the page title contains one of the following characters sets, the page tree displays as 

      $htmlUtil.htmlEncode($content.displayTitle)

      ../ 
      ..\ 
      /.. 
      \..
      

      Steps to Reproduce

      • Create a page, with one of the above strings in the title.
      • Publish/save
      • Check the links in the Page Tree on side bar

      Expected Results

      All the links should display encoded results of displayTitle.

      Actual Results

      Title is not encoded correctly

      Workaround

      There is no obvious workaround found.

      Attachments

        Issue Links

          Activity

            People

              a2879c3b3278 Jordan Anslow
              8b5c2ab424ac Jing Zheng
              Votes:
              2 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: