[JRASERVER-10542] Request parameters are not HTML encoded on the 500 page - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: High (View bug fix roadmap)
Fix Version/s: 3.6.3
Affects Version/s: 3.6.2
Component/s: None
Labels:
- affects-server

Introduced in Version:
3.06
Bug Fix Policy:
View Atlassian Server bug fix policy

The 500 page in JIRA lists the request parameters, but does not HTML encode them. This can lead to cross site scripting.

No work has yet been logged on this issue.

Assignee:: Sam Chang [Atlassian]

Reporter:: AntonA

Affected customers:: 0 This affects my team

Watchers:: 0 Start watching this issue

Created:: 05/Jul/2006 2:45 AM

Updated:: 27/Mar/2019 11:50 PM

Resolved:: 05/Jul/2006 6:05 AM