Asset Check-In With Comment String '"></script> <script' Breaks Check-In Screen
(Doc ID 2331387.1)
Last updated on DECEMBER 05, 2017
Applies to:Oracle WebCenter Sites - Version 22.214.171.124.0 and later
Information in this document applies to any platform.
If asset is Check-In with following comment string, future Check-In of this asset shows broken Check-In screen:
Steps to reproduce:
1. Create a new asset with revision tracking enabled.
2. After saving the initial version, click on Check-In button
3. Click Check-In
4. Enter "></script> <script as a comment
5. Click Check-In
6. Click Go back.
7. Click Edit.
8. Click Check-In. The asset tab goes blank and only displays the following text:
Name Type Version Comment Status Detail Action
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document