Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0056995
TypeCategorySeverityReproducibilityDate SubmittedLast Update
backport[Openbravo ERP] A. Platformmajorhave not tried2024-10-14 08:112025-03-27 10:23
ReporteralostaleView Statuspublic 
Assigned ToTriage Platform Base 
PrioritynormalResolutionout of dateFixed in Version
StatusclosedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget VersionPR24Q3.3
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Statusopen
Review Assigned To
OBNetwork customerGold
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0056995: broken layout in window title

DescriptionWhen opening a link to Openbravo backoffice if the title of a view contains some special characters the layout can be broken.
Steps To ReproduceTry to open some link like:

https://localhost:8080/openbravo/#%7Bst:0,bm:%5B%7BviewId:__X__,params:%7BtabTitle:__%3Cimg%20src=a%20onerr [^]
or=alert()%3E__%7D%7D%5D%7D
Proposed SolutionProperly treat/escape tab titles when rendering them.
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]
blocks defect 0056754 closedTriage Platform Base broken layout in window title 

-  Notes
(0172712)
hgbot (developer)
2024-11-28 12:58

 Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1461 [^]

- Issue History
Date Modified Username Field Change
2024-11-05 18:53 AugustoMauch Type defect => backport
2024-11-05 18:53 AugustoMauch Target Version => PR24Q3.3
2024-11-28 12:58 hgbot Note Added: 0172712
2025-03-27 10:23 AugustoMauch Status scheduled => closed
2025-03-27 10:23 AugustoMauch Resolution open => out of date

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker