Bug 44097 – Missing html escaping

Bug 44097 - Missing html escaping


Summary:	Missing html escaping

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	UMC (Generic)
Version:	UCS 4.2
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.2
Assigned To:	Florian Best
QA Contact:	Johannes Keiser

URL:
Keywords:	interim-4

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2017-03-28 10:04 CEST by Erik Damrose
Modified:	2017-04-04 18:29 CEST (History)
CC List:	2 users (show)

See Also:
What kind of report is it?:	Development Internal
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
missing html escaping in portal (68.34 KB, image/png) 2017-03-28 10:04 CEST, Erik Damrose	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Erik Damrose

2017-03-28 10:04:27 CEST

Created attachment 8662 [details]
missing html escaping in portal

At least in the portal there is missing html escaping, see screenshot

univention-portal                                   1.0.10-12A~4.2.0.201703271958
univention-web-js                                   1.0.41-6A~4.2.0.201703271948
univention-management-console-frontend              9.0.76-1A~4.2.0.201703271514

Comment 1 Florian Best

2017-03-28 11:51:29 CEST

univention-portal (1.0.11-1):
r78395 | Bug #44097: fix html content of portal entry

Comment 2 Johannes Keiser

2017-03-28 15:50:34 CEST

OK: looks good
-> Verfified

Comment 3 Stefan Gohmann

2017-04-04 18:29:29 CEST

UCS 4.2 has been released:
 https://docs.software-univention.de/release-notes-4.2-0-en.html
 https://docs.software-univention.de/release-notes-4.2-0-de.html

If this error occurs again, please use "Clone This Bug".