Asset Check-In With Comment String '"></script> <script' Breaks Check-In Screen (Doc ID 2331387.1)

Last updated on MARCH 15, 2019

Applies to:

Symptoms

 If asset is Check-In with following comment string, future Check-In of this asset shows broken Check-In screen:

Steps to reproduce:

1. Create a new asset with revision tracking enabled.
2. After saving the initial version, click on Check-In button
3. Click Check-In
4. Enter "></script> <script as a comment
5. Click Check-In
6. Click Go back.
7. Click Edit.
8. Click Check-In. The asset tab goes blank and only displays the following text:

Name Type Version Comment Status Detail Action
Checkout
Undo Checkout
Checkin

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.