Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0049485Openbravo ERPA. Platformpublic2022-06-06 13:472022-07-07 19:53
ReporterAugustoMauch 
Assigned ToTriage Platform Base 
PrioritynormalSeveritymajorReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target VersionFixed in VersionPR22Q4 
Merge Request Statusapproved
Review Assigned To
OBNetwork customerNo
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0049485: Improve error messages after clicking a link
DescriptionImprove error messages after clicking a link
Steps To Reproduce-
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
related to backport 0049761PR22Q2.1 closed jarmendariz Improve error messages after clicking a link 
related to backport 0049762PR22Q1.3 closed jarmendariz Improve error messages after clicking a link 
related to backport 0049760PR22Q3 closed Triage Platform Base Improve error messages after clicking a link 
related to defect 0049823 closed jarmendariz Remove unneeded case change in query parameter 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2022-06-06 13:47AugustoMauchNew Issue
2022-06-06 13:47AugustoMauchAssigned To => Triage Platform Base
2022-06-06 13:47AugustoMauchOBNetwork customer => No
2022-06-06 13:47AugustoMauchModules => Core
2022-06-06 13:47AugustoMauchTriggers an Emergency Pack => No
2022-06-06 13:47AugustoMauchStatusnew => scheduled
2022-06-16 16:24hgbotMerge Request Status => open
2022-06-16 16:24hgbotNote Added: 0138435
2022-06-16 23:53hgbotMerge Request Statusopen => approved
2022-06-16 23:53hgbotResolutionopen => fixed
2022-06-16 23:53hgbotStatusscheduled => closed
2022-06-16 23:53hgbotNote Added: 0138453
2022-06-16 23:53hgbotFixed in Version => PR22Q3
2022-06-16 23:53hgbotNote Added: 0138454
2022-06-23 01:33hgbotNote Added: 0138658
2022-07-04 09:05hgbotNote Added: 0138994
2022-07-04 09:05hgbotFixed in VersionPR22Q3 => PR22Q4
2022-07-04 09:05hgbotNote Added: 0138995
2022-07-07 19:51jarmendarizIssue cloned0049760
2022-07-07 19:51jarmendarizRelationship addedrelated to 0049760
2022-07-07 19:52jarmendarizRelationship addedrelated to 0049761
2022-07-07 19:53jarmendarizRelationship addedrelated to 0049762
2022-07-18 09:48jarmendarizRelationship addedrelated to 0049823

Notes
(0138435)
hgbot   
2022-06-16 16:24   
Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/622 [^]
(0138453)
hgbot   
2022-06-16 23:53   
Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/622 [^]
(0138454)
hgbot   
2022-06-16 23:53   
Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/openbravo [^]
Changeset: 89d44cdcbbcd5bbd5f18cb1c2730f2aea5e6afce
Author: Meriem Azaf <meriem.azaf@openbravo.com>
Date: 16-06-2022 23:27:46
URL: https://gitlab.com/openbravo/product/openbravo/-/commit/89d44cdcbbcd5bbd5f18cb1c2730f2aea5e6afce [^]

Fixes ISSUE-49485: Improve error messages after clicking a link

The problem that when we have a sql injection a message showed to the user containing private information.

the fix, we add in referencedLink.java in doPost a catch clause with an explicit message.

---
M src/org/openbravo/erpCommon/utility/ReferencedLink.java
---
(0138658)
hgbot   
2022-06-23 01:33   
Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/626 [^]
(0138994)
hgbot   
2022-07-04 09:05   
Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/626 [^]
(0138995)
hgbot   
2022-07-04 09:05   
Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/openbravo [^]
Changeset: 272c37c01ffba34b730b148ec22aa1e1ea8e8486
Author: Augusto Mauch <augusto.mauch@openbravo.com>
Date: 04-07-2022 07:04:50
URL: https://gitlab.com/openbravo/product/openbravo/-/commit/272c37c01ffba34b730b148ec22aa1e1ea8e8486 [^]

Fixes ISSUE-49485: Validates parameters

---
M src/org/openbravo/erpCommon/utility/ReferencedTables.java
M src/org/openbravo/erpCommon/utility/ReferencedTables_data.xsql
---