Bug 794401 (JBEPP-1445) - able to create page on dashboard with non-valid name
Summary: able to create page on dashboard with non-valid name
Keywords:
Status: CLOSED WONTFIX
Alias: JBEPP-1445
Product: JBoss Enterprise Portal Platform 5
Classification: JBoss
Component: unspecified
Version: 5.2.0.GA
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 5.2.1.GA
Assignee: Default User
QA Contact:
URL: http://jira.jboss.org/jira/browse/JBE...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-12-07 21:57 UTC by Viliam Rockai
Modified: 2015-09-01 03:31 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-01-20 15:47:24 UTC
Type: Bug

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker JBEPP-1445 0 None Closed able to create page on dashboard with non-valid name 2012-05-07 10:21:18 UTC

Description Viliam Rockai 2011-12-07 21:57:08 UTC 
project_key: JBEPP

go to dahsboard
click dashboard editor -> add new page
name the node whatever and put <script>alert('a');</script> as the display name.

this page is saved without any error message with non-valid name (it's unable to create such page, with the + button in dashboard)
Comment 2 Thomas Heute 2012-01-13 15:10:24 UTC 
Labels: Added: EPP_5_2_1_Candidate
Comment 3 hfnukal@redhat.com 2012-01-20 15:47:24 UTC 
Release Notes Docs Status: Added: Not Required
Comment 4 Thomas Heute 2012-02-09 10:08:46 UTC 
Labels: Removed: EPP_5_2_1_Candidate
Note You need to log in before you can comment on or make changes to this bug.