Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-26753

Profile2 builds path to skin CSS in an unsafe way

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: CLOSED
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.7.2, 2.8.3, 2.9.0, 2.9.1, 2.9.2, 10.0
    • Fix Version/s: 2.9.2
    • Component/s: Profile
    • Labels:
      None
    • Previous Issue Keys:
      PRFL-812

      Description

      in the file impl/src/java/org/sakaiproject/profile2/logic/SakaiProxyImpl.java, the "skin.default" property is fetched and used directly to build a path to tool.css which may not be correct since the portal uses new rules for building skin paths in 2.9.

        Gliffy Diagrams

          Zeplin

            Attachments

              Issue Links

                Activity

                  People

                  Assignee:
                  steve.swinsburg Steve Swinsburg
                  Reporter:
                  daveadams David Adams
                  Votes:
                  0 Vote for this issue
                  Watchers:
                  4 Start watching this issue

                    Dates

                    Created:
                    Updated:
                    Resolved:

                      Git Integration