Joerg Hoh created SLING-13334:
---------------------------------
Summary: Fix input validation gaps
Key: SLING-13334
URL: https://issues.apache.org/jira/browse/SLING-13334
Project: Sling
Issue Type: Improvement
Components: XSS Protection API
Reporter: Joerg Hoh
Several validation utility methods, intended to make untrusted input safe for
use in specific output contexts, checked a different representation of the
input than what is ultimately interpreted downstream. This could, in certain
contexts, have allowed crafted input to bypass validation and produce
unintended behavior at the point of use.
Also address excessive resource consumption in the same area.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
