Wiki sharing broken

Malendur

malendur8944@hub.art3mis.de

Для этого канала пока не добавлено описание

Статус:: Heureux

Wiki sharing broken

Tue, 14 May 2019 23:19:40 +0200

Malendur

malendur8944@hub.art3mis.de

!zotlabs.org | Hubzilla Development

Sharing a wiki page is broken because the # in the body parameter (in #^[zrl=...) is not escaped.
Escaping manually in the URL fixes it.
Can someone confirm that (and create an issue, or even a MR)?
Thanks

hubzilla

Fri, 17 May 2019 05:49:58 +0200

Xanthor

xanthor@ussr.win

I think this is a security issue.
Try to create a wiki page with the title "><script>window.alert('bug')</script> and see...

Fri, 17 May 2019 12:53:18 +0200

Mario Vavti

mario@hub.somaton.com

Those issues are probably fixed in recent master...

Wed, 05 Jun 2019 09:14:29 +0200

Malendur

malendur8944@hub.art3mis.de

Yes, it's fixed in 4.2. Thanks!