[
https://issues.apache.org/jira/browse/SLING-13334?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Joerg Hoh reassigned SLING-13334:
---------------------------------
Assignee: Joerg Hoh
> Fix input validation gaps
> -------------------------
>
> Key: SLING-13334
> URL: https://issues.apache.org/jira/browse/SLING-13334
> Project: Sling
> Issue Type: Improvement
> Components: XSS Protection API
> Reporter: Joerg Hoh
> Assignee: Joerg Hoh
> Priority: Major
>
> Several validation utility methods, intended to make untrusted input safe for
> use in specific output contexts, checked a different representation of the
> input than what is ultimately interpreted downstream. This could, in certain
> contexts, have allowed crafted input to bypass validation and produce
> unintended behavior at the point of use.
> Also address excessive resource consumption in the same area.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
