xwiki/xwiki-platform — pull request #122 by tdelafosse (2013-06-27 17:41:31+00:00)
Title: XWiki 9151 : XSS vulnerability in link syntax when using "path:" 

This should also solve XWiki-8593 : XSS in images and links using on* parameter. See the xwiki-rendering corresponding pull request (https://github.com/xwiki/xwiki-rendering/pull/6).