Anonymous | Login | Signup for a new account | 2024-04-20 03:58 CDT |
Main | My View | View Issues | Change Log | Roadmap | Docs | Wiki | Repositories |
Dependency Graph | [ View Issue ] [ Relation Graph ] [ Horizontal ] | |||
|
||||
|
Viewing Issue Simple Details | |||||
ID | Category | Type | Reproducibility | Date Submitted | Last Update |
0000662 | [In-Portal CMS] Data Management | bug report | always | 2010-03-27 17:28 | 2010-07-22 15:03 |
Reporter | BaSSiST | View Status | public | ||
Assigned To | alex | ||||
Priority | normal | Resolution | fixed | ||
Status | closed | ||||
Summary | 0000662: Filenames of uploaded files are not escaped, when used in url | ||||
Description |
Try to upload file with symbols such as "#" or "+" in file name via our standard SWF uploader. You'll see that when full url is built, it's incorrect because file name is not urlencoded. Also this is applicable to folder names in URL - for example, in URL http://www.sitename.com/system/part1/part2/filename.ext part1, part2 & filename.ext (& system?) need to be urlencoded. Another case is non- formatter URL building to uploaded files, I found one in OnViewFile event. |
||||
Additional Information |
Main | My View | View Issues | Change Log | Roadmap | Docs | Wiki | Repositories |
Web Development by Intechnic In-Portal Open Source CMS |