Openbravo Issue Tracking System - Openbravo ERP |
| View Issue Details |
|
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0019842 | Openbravo ERP | A. Platform | public | 2012-02-22 15:51 | 2022-02-01 08:08 |
|
| Reporter | alostale | |
| Assigned To | Triage Platform Base | |
| Priority | normal | Severity | major | Reproducibility | have not tried |
| Status | acknowledged | Resolution | open | |
| Platform | | OS | 5 | OS Version | |
| Product Version | | |
| Target Version | | Fixed in Version | | |
| Merge Request Status | |
| Review Assigned To | |
| OBNetwork customer | No |
| Web browser | |
| Modules | Core |
| Support ticket | |
| Regression level | |
| Regression date | |
| Regression introduced in release | |
| Regression introduced by commit | |
| Triggers an Emergency Pack | No |
|
| Summary | 0019842: Review Cross-site Scripting |
| Description | Review all OB components are Cross-site Scripting safe |
| Steps To Reproduce | - |
| Proposed Solution | |
| Additional Information | |
| Tags | No tags attached. |
| Relationships | | depends on | design defect | 0012030 | | acknowledged | Triage Platform Base | Cross-site Scripting in ActionButton_Responser.html | | depends on | design defect | 0012031 | | acknowledged | Triage Platform Base | Cross-site Scripting in WorkflowControl.html | | depends on | design defect | 0012033 | | acknowledged | Triage Platform Base | Cross-site Scripting in BusinessPartner.html | | depends on | design defect | 0014856 | | acknowledged | Triage Platform Base | 0014855: Cross Site Scripting (XSS) - Reflected - ReportShipmentEditionJR.html - "InpDateTo" Parameter | | depends on | design defect | 0014855 | | acknowledged | Triage Platform Base | Cross Site Scripting (XSS) - Reflected - ReportShipmentEditionJR.html - "InpDateFrom" Parameter | | depends on | design defect | 0014857 | | acknowledged | Triage Platform Base | Cross Site Scripting (XSS) - Reflected - ReportInvoiceCustomerFilterJR.html - "inpProjectkind" Parameter | | depends on | design defect | 0014858 | | acknowledged | Triage Platform Base | Cross Site Scripting (XSS) - Reflected - UserRoles _Edition.html - "inpadUserId" Parameter | | depends on | design defect | 0012034 | | acknowledged | Triage Platform Base | Cross-site Scripting in the generated xxx_Relation.html files | | Not all the children of this issue are yet resolved or closed. |
|
| Attached Files | |
|
| Issue History |
| Date Modified | Username | Field | Change |
| 2012-02-22 15:51 | alostale | New Issue | |
| 2012-02-22 15:51 | alostale | Assigned To | => alostale |
| 2012-02-22 15:51 | alostale | Modules | => Core |
| 2012-02-22 15:51 | alostale | OBNetwork customer | => No |
| 2012-02-22 15:51 | alostale | Relationship added | depends on 0012030 |
| 2012-02-22 15:51 | alostale | Relationship added | depends on 0012031 |
| 2012-02-22 15:52 | alostale | Relationship added | depends on 0012033 |
| 2012-02-22 15:52 | alostale | Relationship added | depends on 0014856 |
| 2012-02-22 15:52 | alostale | Relationship added | depends on 0014855 |
| 2012-02-22 15:52 | alostale | Relationship added | depends on 0014857 |
| 2012-02-22 15:52 | alostale | Relationship added | depends on 0014858 |
| 2012-02-22 15:52 | alostale | Relationship added | depends on 0012034 |
| 2012-09-24 20:52 | AugustoMauch | Note Added: 0052393 | |
| 2012-09-24 20:52 | AugustoMauch | Status | new => scheduled |
| 2017-03-31 14:36 | alostale | Status | scheduled => acknowledged |
| 2017-04-10 14:33 | alostale | Assigned To | alostale => platform |
| 2022-02-01 08:08 | alostale | Assigned To | platform => Triage Platform Base |