<
From version < 60.8 >
edited by Jean SIMARD
on 2013/11/05
To version < 61.1 >
edited by Clemens Robbenhaar
on 2014/02/13
>
Change comment: protect the innocent: url encoding missing

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.simard
1 +XWiki.ClemensRobbenhaar
Content
... ... @@ -270,7 +270,7 @@
270 270   #set($docName = $util.clearName(${request.docName}))
271 271   #set($targetDocName = "${request.spaceName}.${docName}")
272 272   #if(!$xwiki.exists($targetDocName) && $xwiki.hasAccessLevel('edit', $context.user, $targetDocName))
273 - $response.sendRedirect($xwiki.getURL($targetDocName, 'inline', "template=${request.template}&parent=${request.parent}"))
273 + $response.sendRedirect($xwiki.getURL($targetDocName, 'inline', "template=${escapetool.url($request.template)}&parent=${escapetool.url($request.parent)}"))
274 274   ## Stop processing, since we already sent a redirect.
275 275   #stop
276 276   #end

Get Connected