tracker issue : CF-4126659

select a category, or use search below
(searches all categories and all time range)
Title:

Security Analyzer XSS Warning on XmlFormat HTMLEditFormat

| View in Tracker

Status/Resolution/Reason: Closed/Withdrawn/Duplicate

Reporter/Name(from Bugbase): Peter Freitag / Peter Freitag (Peter Freitag)

Created: 03/09/2016

Components: Security Analyzer

Versions: 2016

Failure Type: Unspecified

Found In Build/Fixed In Build: Alpha_v31 /

Priority/Frequency: Trivial / Unknown

Locale/System: English / Mac All

Vote Count: 0

Duplicate ID:	CF-4026103

Problem Description: If I set url.id = Int(url.id) and then output XmlFormat(url.id) HTMLEditFormat(url.id) and simply #url.id# -- no warning is triggered for #url.id# but  XmlFormat(url.id) HTMLEditFormat(url.id) both trigger a warning. 

See attached file.

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	4126659

External Customer Info:
External Company: Foundeo Inc.
External Customer Name: Peter Freitag
External Customer Email: PETE@FOUNDEO.COM
External Test Config:  


Bug File Paths:
\\sjshare.corp.adobe.com\Prereleasebugfiles\ColdFusion Builder\3.1\Alpha_v31\4026612\xmlformat-htmleditformat.cfm

Attachments:

Comments:

Adding BUG AUDIT TRAIL ********action: updated fieldName: Status newValue: Withdrawn oldValue: Unverified oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 10:51:21.0 action: updated fieldName: State newValue: Closed oldValue: Open oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 10:51:21.0 action: updated fieldName: Duplicate Bug ID newValue: CF-4026103 oldValue: Blank oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 10:51:21.0 action: updated fieldName: Reason newValue: Duplicate oldValue: Blank oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 10:51:21.0 action: updated fieldName: Owner newValue: Blank oldValue: preethi oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 10:51:21.0 action: updated fieldName: Closed By newValue: preethi oldValue: Blank oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 10:51:21.0 action: updated fieldName: Date Closed newValue: 2015-07-30 03:51:21.0 oldValue: Blank oprid: preethi recordName: RQ_DEFECT timpestamp: 2015-07-30 10:51:21.0 action: updated fieldName: Version newValue: 12.0 oldValue: 3.1 oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:39:32.0 action: updated fieldName: Product newValue: ColdFusion oldValue: ColdFusion Builder oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:39:32.0 action: updated fieldName: Fix By Product Milestone newValue: Blank oldValue: Blank oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:39:32.0 action: updated fieldName: Dev Assigned newValue: uogra oldValue: bukkittu oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:36:35.0 action: updated fieldName: QE Assigned newValue: preethi oldValue: prk oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:36:35.0 action: updated fieldName: Owner newValue: preethi oldValue: prk oprid: prk recordName: RQ_DEFECT timpestamp: 2015-07-28 05:36:35.0
Comment by CFwatson U.
3578 | March 09, 2016 04:28:23 AM GMT
Added By:preethi Note Added: Hi Peter, The above scenario has already been logged as a bug. Hence closing the bug. Thanks! Date Added :2015-07-30 10:51:23.0 Added By: PreRelease User User Name:Peter Freitag Note Added: Entered Bug. Date Added :2015-07-27 19:18:37.0
Comment by CFwatson U.
3579 | March 09, 2016 04:28:24 AM GMT
Duplicate ID CF-4026103 isn't viewable/trackable. It should be. Thanks!, -Aaron
Comment by External U.
3580 | May 11, 2016 02:15:33 AM GMT
Hi Adobe, Please change Duplicate ID from CF-4026103 to CF-4126669 so that bugbase.adobe.com users can click to see the original. PR:CF-4026612|Public:CF-4126659 is duplicate of PR:CF-4026103|Public:CF-4126669 Thanks!, -Aaron
Comment by External U.
3581 | May 28, 2016 02:00:52 PM GMT