In-Portal Issue Tracker

Welcome to the In-Portal Open Source CMS Issue Tracker! This is a central management / tracking tool for all types of tasks / issues / bugs for the In-Portal Project. Before reporting any issues, please make sure to read the Guide into Issue Tracker and How to Properly Test and Report Bugs!

Viewing Issue Advanced Details Jump to Notes ] Wiki ] View Simple ] Issue History ] Print ]
ID Category Type Reproducibility Date Submitted Last Update
0000843 [In-Portal CMS] Admin Interfaces bug report always 2010-08-31 09:39 2011-03-30 09:53
Reporter erik View Status public Project Name In-Portal CMS
Assigned To alex Developer
Priority normal Resolution fixed Platform
Status closed   OS
  OS Version
ETA none Fixed in Version 5.1.2-B1 Product Version 5.1.0
  Target Version 5.1.2 Product Build
Time EstimateNo estimate
Summary 0000843: User login isn't escaped in user selector
Description Because of typing error in parameter name ("js_ecape" instead of "js_escape") user login isn't escaped resulting to js error in some cases, when attempt is made to select user.
Steps To Reproduce
Additional Information
Tags No tags attached.
Reference http://groups.google.com/group/in-portal-bugs/browse_thread/thread/f0c58909d3dec17e
Change Log Message
Estimate Points 0
Attached Files patch file icon user_selector_login_not_escaped.patch [^] (584 bytes) 2010-08-31 09:39 [Show Content]

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
User avatar (0002785)
Dmitry (manager)
2010-09-07 07:59

Reviewed and tested. I propose to move this to 5.1.1 to get it out of the way.
User avatar (0002787)
alex (manager)
2010-09-07 09:36

Not a big issue, since nobody ever tried to enter symbols, that needs to be escaped in username: ' and ".
User avatar (0003189)
alex (manager)
2011-01-09 13:39

Fix committed to 5.1.x branch. Commit Message:

Fixes 0000843: User login isn't escaped in user selector
User avatar (0003343)
Dmitry (manager)
2011-03-30 09:53

Closing, since 5.1.2 release has been released.

- Related Changesets
In-Portal CMS: 5.1.x r14145
Timestamp: 2011-01-09 13:39:31
Author: alex
Details ] Diff ]
Fixes 0000843: User login isn't escaped in user selector
mod - /in-portal/branches/5.1.x/core/admin_templates/user_selector.tpl Diff ] File ]

- Issue History
Date Modified Username Field Change
2011-03-30 09:53 Dmitry Note Added: 0003343
2011-03-30 09:53 Dmitry Status resolved => closed
2011-01-09 13:39 alex Note Added: 0003189
2011-01-09 13:39 alex Status reviewed and tested => resolved
2011-01-09 13:39 alex Fixed in Version => 5.1.2-B1
2011-01-09 13:39 alex Resolution open => fixed
2011-01-09 13:39 alex Changeset attached 5.1.x r14145
2010-09-28 14:06 Dmitry Fixed in Version 5.1.2 =>
2010-09-28 14:06 Dmitry Target Version Icebox => 5.1.2
2010-09-28 12:14 Dmitry Fixed in Version => 5.1.2
2010-09-07 09:36 alex Note Added: 0002787
2010-09-07 07:59 Dmitry Note Added: 0002785
2010-09-07 07:59 Dmitry Assigned To !COMMUNITY => alex
2010-09-07 07:59 Dmitry Status needs testing => reviewed and tested
2010-08-31 09:40 alex Assigned To => !COMMUNITY
2010-08-31 09:40 alex Developer => alex
2010-08-31 09:40 alex Status active => needs testing
2010-08-31 09:39 alex Reference => http://groups.google.com/group/in-portal-bugs/browse_thread/thread/f0c58909d3dec17e
2010-08-31 09:39 alex Reporter alex => erik
2010-08-31 09:39 alex File Added: user_selector_login_not_escaped.patch
2010-08-31 09:39 alex New Issue



Web Development by Intechnic
In-Portal Open Source CMS
In-Portal Open Source CMS
Copyright © 2000 - 2009 MantisBT Group

Powered by Mantis Bugtracker