httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 64136] New: Using "</script>" keyword as string in javascript will result in malformed javascript
Date Tue, 11 Feb 2020 20:15:56 GMT
https://bz.apache.org/bugzilla/show_bug.cgi?id=64136

            Bug ID: 64136
           Summary: Using "</script>" keyword as string in javascript will
                    result in malformed javascript
           Product: Apache httpd-2
           Version: 2.4-HEAD
          Hardware: PC
                OS: Mac OS X 10.1
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_proxy_html
          Assignee: bugs@httpd.apache.org
          Reporter: schapranow@hpi.de
  Target Milestone: ---

Using "</SCRIPT" as string in Javascript is apparently misinterpreted as end of
javascript HTML inclusion statement when proxy-html is set as output filter.
See example below for reproduction. This results in malformed javascript
output, which fails interpretation.

if(szDocName.toUpperCase().indexOf("</SCRIPT")!=-1){szDocName="";}</script>

-->

if (szDocName.toUpperCase().indexOf("</script>

Thanks for investigating!

Matthieu

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message