Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0057478Openbravo ERPA. Platformpublic2024-12-18 10:462025-02-26 17:55
amartinez 
Triage Platform Base 
normalmajorhave not tried
closedfixed 
5
 
PR24Q4.1PR24Q4.1 
approved
Gold
Core
No
0057478: broken layout in save view - Some flows are still broken
This issue is a continuation of https://issues.openbravo.com/view.php?id=56753 [^]

Improper names (ie. with some special characters) for standard windows saved views, can break the layout when they are displayed.

- The problem is still being reproduced on the Delete View flow
In a registered instance:

1. Log in backoffice
2. Open any window
3. In the toolbar click on Save View
4. Enter a name with invalid format and save
5. In that window click on Save View again to display the name of the view saved in the previous step
6. In Save View, select Save View
7. In Save View select Delete View
  ERROR: Broken layout
View names should be properly treated when they are going to be displayed.
No tags attached.
blocks defect 0057477 closed Triage Platform Base broken layout in save view - Some flows are still broken 
Issue History
2024-12-18 10:47amartinezTypedefect => backport
2024-12-18 10:47amartinezTarget Version => PR24Q4.1
2025-02-26 17:53hgbotMerge Request Status => open
2025-02-26 17:53hgbotNote Added: 0176172
2025-02-26 17:53hgbotMerge Request Statusopen => approved
2025-02-26 17:55hgbotNote Added: 0176173
2025-02-26 17:55hgbotResolutionopen => fixed
2025-02-26 17:55hgbotStatusscheduled => closed
2025-02-26 17:55hgbotFixed in Version => PR24Q4.1
2025-02-26 17:55hgbotNote Added: 0176174

Notes
(0176172)
hgbot   
2025-02-26 17:53   
Merge Request created: https://gitlab.com/orisha-group/bu-commerce/openbravo/product/openbravo/-/merge_requests/1557 [^]
(0176173)
hgbot   
2025-02-26 17:55   
Merge request merged: https://gitlab.com/orisha-group/bu-commerce/openbravo/product/openbravo/-/merge_requests/1557 [^]
(0176174)
hgbot   
2025-02-26 17:55   
Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/orisha-group/bu-commerce/openbravo/product/openbravo [^]
Changeset: 64ef35a1feaac91c5120c75ccb98a17a3b529757
Author: ALEJANDRO MARTINEZ <a.martinez@orisha.com>
Date: 26-02-2025 17:54:05
URL: https://gitlab.com/orisha-group/bu-commerce/openbravo/product/openbravo/-/commit/64ef35a1feaac91c5120c75ccb98a17a3b529757 [^]

Fixes ISSUE-57478: Complete character escaping in delete view to cover all XSS injection points

---
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/main/ob-standard-window.js
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/personalization/ob-manage-views-popups.js
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/personalization/ob-manage-views-toolbar.js
---