Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0038087Openbravo ERP01. General setuppublic2018-03-05 14:552018-03-09 10:18
Reporterngarcia 
Assigned Tocaristu 
PriorityimmediateSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target Version3.0PR17Q4.2Fixed in Version3.0PR17Q4.2 
Merge Request Status
Review Assigned Toalostale
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression levelProduction - Confirmed Stable
Regression date2017-04-12
Regression introduced in release3.0PR17Q3
Regression introduced by commithttps://code.openbravo.com/erp/devel/pi/rev/c17655a6fb3ffb29cdd5d73073615ba9d60cd941 [^]
Triggers an Emergency PackNo
Summary0038087: Cannot log in in the application if the log in warehouse name contains an apostrophe (')
DescriptionCannot log in in the application if the log in warehouse name contains an apostrophe (')
Steps To ReproduceAs group admin role:
   Go to Warehouse and Storage Bins window and modify the warehouse name of the login warehouse from España Región Norte to España' Región Norte

   Log out and log in
   Check the following error message is shown in the browser:

Uncaught SyntaxError: Unexpected identifier - https://livebuilds.openbravo.com/erp_pi_pgsql/org.openbravo.client.kernel/OBCLKER_Kernel/SessionDynamic:... [^]
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
blocks defect 0038041 closed caristu Cannot log in in the application if the log in warehouse name contains an apostrophe (') 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2018-03-08 19:23caristuTypedefect => backport
2018-03-08 19:23caristuTarget Version => 3.0PR17Q4.2
2018-03-09 08:50hgbotCheckin
2018-03-09 08:50hgbotNote Added: 0103114
2018-03-09 08:50hgbotStatusscheduled => resolved
2018-03-09 08:50hgbotResolutionopen => fixed
2018-03-09 08:50hgbotFixed in SCM revision => http://code.openbravo.com/erp/backports/3.0PR17Q4.2/rev/a74d000cdf46dc4d671773b7152ff768e874d98e [^]
2018-03-09 10:18alostaleReview Assigned To => alostale
2018-03-09 10:18alostaleNote Added: 0103117
2018-03-09 10:18alostaleStatusresolved => closed
2018-03-09 10:18alostaleFixed in Version => 3.0PR17Q4.2

Notes
(0103114)
hgbot   
2018-03-09 08:50   
Repository: erp/backports/3.0PR17Q4.2
Changeset: a74d000cdf46dc4d671773b7152ff768e874d98e
Author: Carlos Aristu <carlos.aristu <at> openbravo.com>
Date: Fri Mar 09 08:37:05 2018 +0100
URL: http://code.openbravo.com/erp/backports/3.0PR17Q4.2/rev/a74d000cdf46dc4d671773b7152ff768e874d98e [^]

fixes bug 38087: Can't login if the user profile widget data contains apostrophes

  The JS object used to populate the user profile widget, was being generated without escaping the data properly which could result in a wrong object definition in case of having special characters like apostrophes (').

  To fix this issue we are now using the "js_string" built-in in the .ftl in order to escape the identifiers and labels of the user profile with the escaping rules of the JS language.

---
M modules/org.openbravo.client.application/src/org/openbravo/client/application/navigationbarcomponents/templates/user-info.js.ftl
---
(0103117)
alostale   
2018-03-09 10:18   
reviewed + tested