NOTE: If you are a developer, please use a private wiki based on foswiki/trunk on a daily base ...or use
trunk.foswiki.org to view this page for some minimal testing.
Use
Item9693 for docu changes for 1.2 and 2.0.
Item406: WebSearch does not work with quoted word strings.
| Priority: |
CurrentState: |
AppliesTo: |
Component: |
WaitingFor: |
| Urgent |
Closed |
Engine |
|
Main.KennethLavrsen |
WebSearch does not work with quoted word strings.
The reason is that URLPARAM inside a
SEARCH requires that encode="quote" is used.
Note that this is not triggered by the spec change of URLPARAM into using safe as default. Turning URLPARAM encoding off does not solve this.
You must use encode="quote".
This change is part of the XSS fix but I am putting it on a separate bug item so it gets visible in release note that the bug is fixed.
--
KennethLavrsen - 07 Dec 2008