Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0056995Openbravo ERPA. Platformpublic2024-10-14 08:112024-11-28 12:58
Reporteralostale 
Assigned ToTriage Platform Base 
PrioritynormalSeveritymajorReproducibilityhave not tried
StatusscheduledResolutionopen 
PlatformOS5OS Version
Product Version 
Target VersionPR24Q3.3Fixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0056995: broken layout in window title
DescriptionWhen opening a link to Openbravo backoffice if the title of a view contains some special characters the layout can be broken.
Steps To ReproduceTry to open some link like:

https://localhost:8080/openbravo/#%7Bst:0,bm:%5B%7BviewId:__X__,params:%7BtabTitle:__%3Cimg%20src=a%20onerr [^]
or=alert()%3E__%7D%7D%5D%7D
Proposed SolutionProperly treat/escape tab titles when rendering them.
Additional Information
TagsNo tags attached.
Relationships
blocks defect 0056754 closed Triage Platform Base broken layout in window title 
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2024-11-05 18:53AugustoMauchTypedefect => backport
2024-11-05 18:53AugustoMauchTarget Version => PR24Q3.3
2024-11-28 12:58hgbotNote Added: 0172712

Notes
(0172712)
hgbot   
2024-11-28 12:58   
Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1461 [^]