Bug #35450: Extensions may introduce Cross-Site Scripting - TYPO3 Core - TYPO3 Forge

Actions

Bug #35450

closed

Status:

Rejected

Priority:

Won't have this time

Assignee:

Category:

Target version:

Start date:

2012-04-01

Due date:

% Done:

Estimated time:

TYPO3 Version:

6.0

PHP Version:

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

Problem:
Poorly programmed extensions may introduce Cross-Site Scripting to the site, which is bad.

Solution:
Properly HTML escape the output on a central place to avoid that.

Credits:
Thanks to Rupi for the great suggestions how to solve this.

Actions

Also available in: Atom PDF