Uploaded image for project: 'Confluence Source Editor Plugin'
  1. Confluence Source Editor Plugin
  2. SOURCE-25

Unknown XML Namespace in source clobbers content.

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

XMLWordPrintable

    • true
    • Severity 3 - Minor

      Overwriting content
      Use

      <math href="javascript:alert(1)">CLICKME</math> <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:alert(1)">CLICKME</maction> </math>

      in the source

      When you insert, the page content becomes this error:

      Error: The XML content could not be parsed. There is a problem at line 1, column 739. Parser message: Undeclared namespace prefix "xlink" (for attribute "href") at [row,col

      {unknown-source}

      ]: [1,739]

            [SOURCE-25] Unknown XML Namespace in source clobbers content.

            Petch (Inactive) added a comment -

            The transform engine, when processing an error returns the error as HTML.

            Can't fix the error handling in a plugin only, so will probably need to look for the error in the response in the short-term. Unfortunately error reporting is particularly poor in the transform engine.

            Petch (Inactive) added a comment - The transform engine, when processing an error returns the error as HTML. Can't fix the error handling in a plugin only, so will probably need to look for the error in the response in the short-term. Unfortunately error reporting is particularly poor in the transform engine.

              Unassigned Unassigned
              mhrynczak Mark Hrynczak (Inactive)
              Archiver:
              mkhairuliana Monique Khairuliana (Inactive)

                Created:
                Updated:
                Archived:
                13 years, 21 weeks ago