Rwiki builds path to skin CSS in an unsafe way

Description

In the file rwiki-impl/impl/src/java/uk/ac/cam/caret/sakai/rwiki/component/service/impl/XSLTEntityHandler.java, the "skin.default" property is fetched and used directly to build a path to tool.css which may not be correct since the portal uses new rules for building skin paths in 2.9.

Activity

Show:

Brian J. November 15, 2016 at 1:39 PM

I think this is a non-issue now due to Morpheus, etc. Please re-open if you think otherwise.

Non-Issue

Details

Priority

Affects versions

Components

Assignee

Reporter

Created March 22, 2013 at 7:56 AM
Updated November 15, 2016 at 1:39 PM
Resolved November 15, 2016 at 1:39 PM