Opened 2 years ago

Closed 2 years ago

Last modified 2 years ago

#16042 closed defect (bug) (wontfix)

KSES related XSS Security issue for 2.9

Reported by: hakre Owned by:
Priority: normal Milestone:
Component: General Version: 2.9.2
Severity: normal Keywords: has-patch
Cc:

Description

As the issue is rated as seriously and I could reproduce it on my 2.9.2 testbed and 3.1 is not released yet I backported the kses changes for 2.9.2.

Attachments (1)

16042-full.patch​ (17.4 KB) - added by hakre 2 years ago.
Patch against branch 2.9

Download all attachments as: .zip

Change History (5)

hakre — 2 years ago

Patch against branch 2.9

comment:1   hakre — 2 years ago

This patch includes the requirements by Ulf Härnhammar as in #16039

comment:2 follow-up: ↓ 4   westi — 2 years ago

  • Resolution set to wontfix
  • Status changed from new to closed

2.9 branch is no longer maintained since we went to beta for 3.1

comment:3   ocean90 — 2 years ago

  • Milestone Awaiting Review deleted

comment:4 in reply to: ↑ 2   hakre — 2 years ago

Replying to westi:

2.9 branch is no longer maintained since we went to beta for 3.1

Can such a kind of rule be seen anywhere? Would be great to know.

Note: See TracTickets for help on using tickets.