Policy Details: “><svg onload=”prompt(/xss by evan/);”>

Space

This object is in S1 Core and can only be seen or edited by users with access to view objects in the space.

Users who can see objects in this space:

This object is public and can be viewed by anyone, even if they do not have an account on this server.

Note: After a user passes space policy checks, they must still pass object policy checks.

Special Rules

This object has special rules which override normal object policy rules:

To view a wiki document, you must also be able to view all of its ancestors. The most-restrictive view policy of this document's ancestors is "Public".
To edit a wiki document, you must also be able to view all of its ancestors.

Object Policy

Can View: Public

In detail, this means that these users can take this action, provided they pass all of the checks described above first:

This object is public and can be viewed by anyone, even if they do not have an account on this server.