Using ../ in page content refuses to save

[James Gill]

Heya,

When editing a page, upon adding the characters "../" (even within a Code block macro) produces the following toast message.

At this point, clicking the 'Login' button opens a new tab that takes me successfully to the wiki homepage (without needing to log in). I can no longer click the Close button, as this also produces the same toast message.

Clicking 'Revert all changes' from the meatball menu, is successful, but im presented with a 403 Forbidden message and logged out of Confluence.

I can reproduce this issue in Chrome, Chrome (incognito), Safari. We are using Confluence 7.2.0. I have tried logging out and back in, and clearing cookies and local storage data. I can also confirm this error occurs for other users within out organisation when they attempt the same three character combination.

Is there a fix for this, what am I doing wrong?

[Jessica]

Hello James,

Welcome to the Atlassian Community! Hope you're doing well. :)

I did some tests on a Cloud test site of mine, adding the "../" on the page content or even in the page title, but I didn't receive any errors there.

I noticed you mentioned you are on the Confluence 7.2.0. so it seems you are referring to a Server version, is that correct?

Just wanted to confirm if you are also experiencing this issue on the Confluence Cloud version, and it seems you are also a Confluence Cloud user as well.

In case you are on the Cloud version, would you be able to share with us more details on where exactly and how the "../" is inserted on the page? Is it a simple text or inside a certain macro besides the code block macro?

We'll be looking forward to hearing from you!
Jessica

[James Gill]

@Jessica Thanks so much for your speedy reply.

I apologise, it does appear to be the server version that is having the issue.

It was just in plain text on the page though.

[Jessica]

Hey @James Gill

Thank you for confirming where the behavior on the page is actually happening and how.

Since I'm a Confluence Cloud Engineer, I'm afraid I won't be able to help much since the Server and Cloud versions are different on how they work, so I would need to leave this one to the Community here to help as well, but I highly recommend in this case, raising a Support ticket with us at https://support.atlassian.com/contact/#/, so our Server colleagues can have a look on this one and investigate further.

In case you are not able to open a ticket request with us, we would advise checking with your site admin if he is able to raise a new one on your behalf. 

Kindest Regards,
Jessica