Maniphest T119118

style, class, linkstyle & linkclass parameters allow XSS
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	ashley
	Nov 19 2015, 9:10 PM

Description

The WikiCategoryTagCloud extension doesn't properly validate the values of the aforementioned four XML-style extension parameters.

Proper fix is to call htmlspecialchars() with ENT_QUOTES as the 2nd param (class & linkclass parameters) or Sanitizer::checkCss() (linkstyle & style parameters).

Event Timeline

Maniphest changed the visibility from "Public (No Login Required)" to "Custom Policy".Nov 19 2015, 9:10 PM

Maniphest changed the edit policy from "All Users" to "Custom Policy".

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptNov 19 2015, 9:10 PM

ashley created this task.Nov 19 2015, 9:10 PM

ashley claimed this task.

ashley triaged this task as Medium priority.

ashley updated the task description. (Show Details)

ashley added projects: WikiCategoryTagCloud, Vuln-XSS, acl*security.

ashley changed Security from None to Software security bug.

ashley edited subscribers, added: ashley, • csteipp; removed: Aklapper.

Should be fixed in the great refactoring (version 1.3) of WikiCategoryTagCloud.

Legoktm changed the visibility from "Custom Policy" to "Public (No Login Required)".Nov 19 2015, 10:00 PM

Legoktm changed the edit policy from "Custom Policy" to "All Users".

Legoktm changed Security from Software security bug to None.

• chasemp added a project: Security.Feb 10 2020, 10:59 PM

• chasemp removed a project: acl*security.Feb 20 2020, 8:17 PM

style, class, linkstyle & linkclass parameters allow XSSClosed, ResolvedPublicActions

Description

Event Timeline

style, class, linkstyle & linkclass parameters allow XSS
Closed, ResolvedPublic
Actions