Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0009500
TypeCategorySeverityReproducibilityDate SubmittedLast Update
feature request[Openbravo ERP] A. Platformmajorhave not tried2009-06-16 16:322009-07-16 17:55
ReportershuehnerView Statuspublic 
Assigned Toshuehner 
PrioritynormalResolutionfixedFixed in Version
StatusclosedFix in branchFixed in SCM revision2a0efc182c89
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionpiSCM revision 
Review Assigned To
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0009500: Add infrastructure to VariablesBase class to allow for technical validation of request parameters

DescriptionAdd new get*Parameter function which allow to validate the data read from the request to ensure that they conform to the expected format (i.e. if they are a list of id's, columnnames, etc.).
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]
related to defect 0009578 closedshuehner When doing install.source some warnings appear 
blocks defect 0009145 closedshuehner SQL injection in Report Invoice Discount 
blocks defect 0009501 closedshuehner Audit all xsql to ensure that all xsql-parameters of type argument/replace are properly validated -part1 
blocks defect 0009074 closedshuehner SQL injection in datagrid code 

-  Notes
(0017389)
hgbot (developer)
2009-06-17 17:48

Repository: erp/devel/pi
Changeset: f0eaa140a3143b633612c383a44d2977d9707b0b
Author: Stefan Hühner <stefan.huehner <at> openbravo.com>
Date: Wed Jun 17 17:47:51 2009 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/f0eaa140a3143b633612c383a44d2977d9707b0b [^]

Fixed 9500: Add infrastructure to filter request parameter values
- Allows optional validation of request parameters, to check if they conform to the expected format

---
M src-core/src/org/openbravo/base/VariablesBase.java
A src-core/src/org/openbravo/base/filter/IsIDFilter.java
A src-core/src/org/openbravo/base/filter/IsPositiveIntFilter.java
A src-core/src/org/openbravo/base/filter/RegexFilter.java
A src-core/src/org/openbravo/base/filter/RequestFilter.java
A src-core/src/org/openbravo/base/filter/ValueListFilter.java
---
(0017390)
hgbot (developer)
2009-06-17 17:52

Repository: erp/devel/pi
Changeset: 2a0efc182c89a43a87dbeca02eca95e2074a902b
Author: Stefan Hühner <stefan.huehner <at> openbravo.com>
Date: Wed Jun 17 17:52:42 2009 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/2a0efc182c89a43a87dbeca02eca95e2074a902b [^]

Issue 9500: Convert parameter validation in selector code to use new request filter code

---
M src/org/openbravo/erpCommon/info/Account.java
M src/org/openbravo/erpCommon/info/AccountElementValue.java
M src/org/openbravo/erpCommon/info/BusinessPartner.java
M src/org/openbravo/erpCommon/info/BusinessPartnerMultiple.java
M src/org/openbravo/erpCommon/info/DebtPayment.java
M src/org/openbravo/erpCommon/info/Invoice.java
M src/org/openbravo/erpCommon/info/InvoiceLine.java
M src/org/openbravo/erpCommon/info/Locator.java
M src/org/openbravo/erpCommon/info/Product.java
M src/org/openbravo/erpCommon/info/ProductComplete.java
M src/org/openbravo/erpCommon/info/ProductMultiple.java
M src/org/openbravo/erpCommon/info/Project.java
M src/org/openbravo/erpCommon/info/SalesOrder.java
M src/org/openbravo/erpCommon/info/SalesOrderLine.java
M src/org/openbravo/erpCommon/info/SelectorUtility.java
M src/org/openbravo/erpCommon/info/ShipmentReceipt.java
M src/org/openbravo/erpCommon/info/ShipmentReceiptLine.java
---

- Issue History
Date Modified Username Field Change
2009-06-16 16:32 shuehner New Issue
2009-06-16 16:32 shuehner Assigned To => shuehner
2009-06-16 16:33 shuehner Relationship added blocks 0009101
2009-06-16 16:33 shuehner Relationship added blocks 0009145
2009-06-16 16:40 shuehner Relationship added blocks 0009501
2009-06-17 17:48 hgbot Checkin
2009-06-17 17:48 hgbot Note Added: 0017389
2009-06-17 17:48 hgbot Status new => resolved
2009-06-17 17:48 hgbot Resolution open => fixed
2009-06-17 17:48 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/f0eaa140a3143b633612c383a44d2977d9707b0b [^]
2009-06-17 17:52 hgbot Checkin
2009-06-17 17:52 hgbot Note Added: 0017390
2009-06-17 17:52 hgbot Fixed in SCM revision http://code.openbravo.com/erp/devel/pi/rev/f0eaa140a3143b633612c383a44d2977d9707b0b [^] => http://code.openbravo.com/erp/devel/pi/rev/2a0efc182c89a43a87dbeca02eca95e2074a902b [^]
2009-06-17 18:24 shuehner Relationship added blocks 0009074
2009-06-17 18:24 shuehner Relationship deleted blocks 0009101
2009-06-22 11:57 shuehner Relationship added related to 0009578
2009-07-11 08:22 pjuvara Status resolved => closed
2009-07-16 17:55 anonymous sf_bug_id 0 => 2822566


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker