Skip to content

DOC-3243: Pasting an HTML document was vulnerable to XSS attacks on link element href attribute #4031

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
kemister85 wants to merge 2 commits into
base: feature/8.4.0/DOC-3243
Choose a base branch
from
Open

DOC-3243: Pasting an HTML document was vulnerable to XSS attacks on link element href attribute #4031

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0254ff1
Docs: DOC-3243 - Pasting an HTML document was vulnerable to XSS attac…
kemister85 Mar 18, 2026
28e91af
Update modules/ROOT/pages/8.4.0-release-notes.adoc
kemister85 Mar 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions modules/ROOT/pages/8.4.0-release-notes.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,6 +69,20 @@ The {productname} {release-version} release includes an accompanying release of

For information on the **<Premium plugin name 1>** plugin, see: xref:<plugincode>.adoc[<Premium plugin name 1>].

=== Full Page HTML

The {productname} {release-version} release includes an accompanying release of the **Full Page HTML** premium plugin.

**Full Page HTML** includes the following fix.

==== Pasting an HTML document was vulnerable to XSS attacks
// #TINY-13673

A cross-site scripting (XSS) vulnerability was discovered in the Full Page HTML plugin. Previously, malicious code within the document `<head>` was able to be executed when pasted.

This vulnerability has been patched in {productname} {release-version} by ensuring that content in the document `<head>` is properly encoded.

For information on the **Full Page HTML** plugin, see: xref:fullpagehtml.adoc[Full Page HTML].

[[accompanying-premium-plugin-end-of-life-announcement]]
== Accompanying Premium plugin end-of-life announcement
Expand Down
Loading