Bug 794395 (JBEPP-1439) - invalid page title causes the edit node dialog to disappear
Summary: invalid page title causes the edit node dialog to disappear
Keywords:
Status: CLOSED UPSTREAM
Alias: JBEPP-1439
Product: JBoss Enterprise Portal Platform 5
Classification: JBoss
Component: Portal
Version: 5.2.0.GA
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 5.2.1.ER02
Assignee: Nobody
QA Contact:
URL: http://jira.jboss.org/jira/browse/JBE...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-12-06 16:19 UTC by Viliam Rockai
Modified: 2025-02-10 03:15 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2025-02-10 03:15:20 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker JBEPP-1439 0 Major Closed invalid page title causes the edit node dialog to disappear 2014-02-10 01:15:32 UTC

Description Viliam Rockai 2011-12-06 16:19:21 UTC 
project_key: JBEPP

in site, click on edit navigation for classic portal
in page selector tab, type "anything" in the name and "Site Map<script>alert('a');</script>" into title
click create page and dialog disappears
Comment 3 Marko Strukelj 2012-03-05 22:44:31 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
CAUSE: Entered text becomes part of portal page HTML as-is, including special characters like angle brackets
CONSEQUENCE: Entered text can break a portal page
FIX: Prevent entry of angle brackets using NoHTMLTagValidator
RESULT: Text that could break a portal page can't be entered any more. If angle brackets are desired in the output, character references can be used - &amp;lt; and &amp;gt;
Comment 4 Marko Strukelj 2012-03-05 22:47:01 UTC 
    Technical note updated. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    Diffed Contents:
@@ -1,4 +1,4 @@
 CAUSE: Entered text becomes part of portal page HTML as-is, including special characters like angle brackets
 CONSEQUENCE: Entered text can break a portal page
 FIX: Prevent entry of angle brackets using NoHTMLTagValidator
-RESULT: Text that could break a portal page can't be entered any more. If angle brackets are desired in the output, character references can be used - &amp;lt; and &amp;gt;+RESULT: Text that could break a portal page can't be entered any more. If angle brackets are desired in the output, character references can be used - &lt; and &gt;
Comment 6 Jared MORGAN 2012-03-27 23:23:42 UTC 
Deleted Technical Notes Contents.

Old Contents:
CAUSE: Entered text becomes part of portal page HTML as-is, including special characters like angle brackets
CONSEQUENCE: Entered text can break a portal page
FIX: Prevent entry of angle brackets using NoHTMLTagValidator
RESULT: Text that could break a portal page can't be entered any more. If angle brackets are desired in the output, character references can be used - &lt; and &gt;
Comment 10 Red Hat Bugzilla 2025-02-10 03:15:20 UTC 
This product has been discontinued or is no longer tracked in Red Hat Bugzilla.
Note You need to log in before you can comment on or make changes to this bug.