XSS using WebFragmentBuilder for WebItemProvider

XMLWordPrintable

    • 6.03
    • 4.6

      The label is not escaped properly when using WebFragmentBuilder to generate links for JIRA's nav dropdown.

      This only happens when <param name="lazy" value="true"/> is not present in the relevant WebSection.

              Assignee:
              Oswaldo Hernandez (Inactive)
              Reporter:
              chao
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: