Skip to content
Sign in

Changes

Lancé par une alarme périodique
Started 24 j ago
Took 2 h 3 mn
Keep the WYSIWYG images whose source has characters forbidden by the URI syntax
( d9bbf30 )
core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java core-api/src/test/java/org/silverpeas/core/security/html/EmbeddedSourceValidatorTest.java core-library/src/test/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygContentTransformerTest.java core-war/src/main/webapp/attachment/jsp/editAttachedFiles.jsp core-api/src/main/java/org/silverpeas/core/security/html/EmbeddedSourceValidator.java
Miguel Moquillon at
Bug #15502 Allow again the scripts in the WYSIWYG contents for trusted source
( 9a5e492 )
core-api/src/main/java/org/silverpeas/core/util/security/SecuritySettings.java core-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.java core-library/src/test/java/org/silverpeas/core/contribution/content/wysiwyg/service/WysiwygContentTransformerTest.java core-configuration/src/main/config/properties/org/silverpeas/util/security.properties core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java core-api/src/main/java/org/silverpeas/core/security/html/EmbeddedSourceValidator.java core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java core-api/src/test/java/org/silverpeas/core/security/html/EmbeddedSourceValidatorTest.java core-web/src/test/java/org/silverpeas/core/web/filter/ScriptCheckerTest.java core-web/src/test/resources/org/silverpeas/util/security.properties core-web/src/main/java/org/silverpeas/core/web/filter/ScriptChecker.java core-web/src/integration-test/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilterIT.java core-web/src/integration-test/resources/org/silverpeas/util/security.properties core-library/src/main/java/org/silverpeas/core/contribution/content/wysiwyg/service/directive/SanitizeForRenderingDirective.java core-web/src/main/java/org/silverpeas/core/web/filter/OpeningTag.java
Miguel Moquillon at
Bug #15502 Tell the reason for which a value is rejected as a XSS injection
( 198ca3f )
core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java core-web/src/main/java/org/silverpeas/core/web/filter/exception/WebSecurityException.java core-web/src/main/java/org/silverpeas/core/web/filter/XssChecker.java core-web/src/main/java/org/silverpeas/core/web/filter/SecurityChecker.java core-web/src/main/java/org/silverpeas/core/web/filter/OpeningTag.java core-web/src/main/java/org/silverpeas/core/web/filter/XssPatternChecker.java core-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.java core-web/src/test/java/org/silverpeas/core/web/filter/ScriptCheckerTest.java core-web/src/main/java/org/silverpeas/core/web/filter/MessageFilter.java core-web/src/main/java/org/silverpeas/core/web/filter/SecurityCheckerProvider.java core-web/src/main/java/org/silverpeas/core/web/filter/ScriptChecker.java core-web/src/test/java/org/silverpeas/core/web/filter/XssCheckerTest.java core-web/src/main/java/org/silverpeas/core/web/filter/exception/WebXssInjectionSecurityException.java core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java core-web/src/test/java/org/silverpeas/core/web/filter/XssPatternCheckerTest.java
Miguel Moquillon at