Bug 64136 - Using "</script>" keyword as string in javascript will result in malformed javascript
Summary: Using "</script>" keyword as string in javascript will result in malformed ja...
Status: NEW
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_proxy_html (show other bugs)
Version: 2.4-HEAD
Hardware: PC Mac OS X 10.1
: P2 normal (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-02-11 20:15 UTC by schapranow
Modified: 2020-02-11 20:15 UTC (History)
0 users


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description schapranow 2020-02-11 20:15:56 UTC 
Using "</SCRIPT" as string in Javascript is apparently misinterpreted as end of javascript HTML inclusion statement when proxy-html is set as output filter. See example below for reproduction. This results in malformed javascript output, which fails interpretation.

if(szDocName.toUpperCase().indexOf("</SCRIPT")!=-1){szDocName="";}</script>

-->

if (szDocName.toUpperCase().indexOf("</script>

Thanks for investigating!

Matthieu